Skip to content

ci(audit): add new nightly cargo audit job#177

Open
oleonardolima wants to merge 1 commit intobitcoindevkit:masterfrom
oleonardolima:ci/add-nightly-audit-job
Open

ci(audit): add new nightly cargo audit job#177
oleonardolima wants to merge 1 commit intobitcoindevkit:masterfrom
oleonardolima:ci/add-nightly-audit-job

Conversation

@oleonardolima
Copy link
Copy Markdown
Collaborator

Description

As I was going through the recent audit issues in bdk and bdk_wallet I noticed this nightly job was missing here.

I've added the new audit.yml job in CI and also added the .cargo/audit.toml in case we need to ignore any unapplicable advisories in the future.

Changelog notice


### Added

- ci(audit): add new nightly `cargo audit` job
- chore: add new `.cargo/audit.toml`

Checklists

All Submissions:

@oleonardolima oleonardolima self-assigned this Mar 25, 2026
@oleonardolima oleonardolima added the ci Continuous Integration issues label Mar 25, 2026
- add new `audit.yml` CI job.
- add new `.cargo/audit.toml`.
@oleonardolima oleonardolima force-pushed the ci/add-nightly-audit-job branch from fb2a5b6 to 02dee37 Compare March 25, 2026 20:27
- '.github/workflows/audit.yml'
# Run on changed dependencies
- '**/Cargo.toml'
- '**/Cargo.lock'
Copy link
Copy Markdown
Member

@luisschwab luisschwab Mar 25, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We don't commit the lockfile (yet). This can be added once the switch to cargo-rbmt is done here and we start comitting Cargo-minimal.lock and Cargo-recent.lock.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci Continuous Integration issues

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants