Merge pull request #49 from hydroid7/iox-2-48-cargo-audit-ci

[#48] Adding audit scripts

.cirrus.yml

@@ -97,6 +97,8 @@ only_if: $CIRRUS_BRANCH == 'main' || ($CIRRUS_PR != '' && $CIRRUS_BASE_BRANCH ==
 preflight_check_task:
   <<: *IOX2_CONTAINER_UBUNTU_22_04_X64
   set_toolchain_script: rustup default stable
+  fingerprint_script: 
+    - cargo audit
   # TODO iox2-#8: add more preflight-checks here
   <<: *IOX2_CARGO_FMT_AND_CLIPPY
   <<: *IOX2_COMMON_BUILD_DEBUG # only build without tests to not slow down other tasks due to failures in flaky tests

doc/release-notes/iceoryx2-unreleased.md

@@ -20,7 +20,7 @@
 
 ### Workflow
 
- * Example [#1](https://github.com/eclipse-iceoryx/iceoryx2/issues/1)
+ * add `cargo audit` for security vulnerability checking in dependencies [#48](https://github.com/eclipse-iceoryx/iceoryx2/issues/48)
 
 ### New API features
 

internal/docker/archlinux-base-devel

@@ -26,6 +26,8 @@ RUN echo "#### Installing dependencies" \
        rustfmt \
   && echo "#### Installing cargo-nextest" \
   && cargo install cargo-nextest --locked \
+  && echo "#### Installing cargo-audit" \
+  && cargo install cargo-audit --locked \
   && echo "#### Creating users and groups required for tests" \
   && useradd testuser1 \
   && useradd testuser2 \

internal/docker/ubuntu-22.04

@@ -32,6 +32,8 @@ RUN echo "#### Installing dependencies" \
        rustfmt \
   && echo "#### Installing cargo-nextest" \
   && cargo install cargo-nextest --locked \
+  && echo "#### Installing cargo-audit" \
+  && cargo install cargo-audit --locked \
   && echo "Installing grcov" \
   && cargo install grcov \
   && echo "#### Creating users and groups required for tests" \