diff --git a/.cirrus.yml b/.cirrus.yml index 662357b05..a5154d4c5 100644 --- a/.cirrus.yml +++ b/.cirrus.yml @@ -97,6 +97,8 @@ only_if: $CIRRUS_BRANCH == 'main' || ($CIRRUS_PR != '' && $CIRRUS_BASE_BRANCH == preflight_check_task: <<: *IOX2_CONTAINER_UBUNTU_22_04_X64 set_toolchain_script: rustup default stable + fingerprint_script: + - cargo audit # TODO iox2-#8: add more preflight-checks here <<: *IOX2_CARGO_FMT_AND_CLIPPY <<: *IOX2_COMMON_BUILD_DEBUG # only build without tests to not slow down other tasks due to failures in flaky tests diff --git a/doc/release-notes/iceoryx2-unreleased.md b/doc/release-notes/iceoryx2-unreleased.md index 9353e2ce7..2632b3cb0 100644 --- a/doc/release-notes/iceoryx2-unreleased.md +++ b/doc/release-notes/iceoryx2-unreleased.md @@ -20,7 +20,7 @@ ### Workflow - * Example [#1](https://github.com/eclipse-iceoryx/iceoryx2/issues/1) + * add `cargo audit` for security vulnerability checking in dependencies [#48](https://github.com/eclipse-iceoryx/iceoryx2/issues/48) ### New API features diff --git a/internal/docker/archlinux-base-devel b/internal/docker/archlinux-base-devel index ca91785ea..cf5d7a7f2 100644 --- a/internal/docker/archlinux-base-devel +++ b/internal/docker/archlinux-base-devel @@ -26,6 +26,8 @@ RUN echo "#### Installing dependencies" \ rustfmt \ && echo "#### Installing cargo-nextest" \ && cargo install cargo-nextest --locked \ + && echo "#### Installing cargo-audit" \ + && cargo install cargo-audit --locked \ && echo "#### Creating users and groups required for tests" \ && useradd testuser1 \ && useradd testuser2 \ diff --git a/internal/docker/ubuntu-22.04 b/internal/docker/ubuntu-22.04 index 2cdce4a44..45a68dcd4 100644 --- a/internal/docker/ubuntu-22.04 +++ b/internal/docker/ubuntu-22.04 @@ -32,6 +32,8 @@ RUN echo "#### Installing dependencies" \ rustfmt \ && echo "#### Installing cargo-nextest" \ && cargo install cargo-nextest --locked \ + && echo "#### Installing cargo-audit" \ + && cargo install cargo-audit --locked \ && echo "Installing grcov" \ && cargo install grcov \ && echo "#### Creating users and groups required for tests" \