Skip to content

Use a Rust toolchain file #96279

Use a Rust toolchain file

Use a Rust toolchain file #96279

name: Dependency Review
on:
pull_request:
merge_group:
jobs:
dependency-review:
uses: gravitational/shared-workflows/.github/workflows/dependency-review.yaml@main
permissions:
contents: read
pull-requests: write
with:
base-ref: ${{ github.event.pull_request.base.sha || 'master' }}
# 'GHSA-6xf3-5hp7-xqqg' is a false positive. That's an old Teleport Vuln,
# but because of the replace, the dependency cannot find the correct
# Teleport version.
allow-ghsas: 'GHSA-6xf3-5hp7-xqqg'
# IronRDP uses MIT/Apache-2.0 but slashes are not recognized by dependency review action
allow-dependencies-licenses: >-
pkg:cargo/ironrdp-core,
pkg:cargo/ironrdp-async,
pkg:cargo/ironrdp-connector,
pkg:cargo/ironrdp-pdu,
pkg:cargo/ironrdp-session,
pkg:cargo/ironrdp-svc,
pkg:cargo/ironrdp-tokio,
pkg:cargo/asn1-rs,
pkg:cargo/asn1-rs-derive,
pkg:cargo/asn1-rs-impl,
pkg:cargo/curve25519-dalek-derive,
pkg:cargo/der-parser,
pkg:cargo/icu_collections,
pkg:cargo/icu_locid,
pkg:cargo/icu_locid_transform,
pkg:cargo/icu_locid_transform_data,
pkg:cargo/icu_normalizer,
pkg:cargo/icu_normalizer_data,
pkg:cargo/icu_properties,
pkg:cargo/icu_properties_data,
pkg:cargo/icu_provider,
pkg:cargo/icu_provider_macros,
pkg:cargo/litemap,
pkg:cargo/ring,
pkg:cargo/sspi,
pkg:cargo/tokio-boring,
pkg:cargo/tokio-rustls,
pkg:cargo/writeable,
pkg:cargo/yoke,
pkg:cargo/yoke-derive,
pkg:cargo/zerofrom,
pkg:cargo/zerofrom-derive,
pkg:cargo/zerovec,
pkg:cargo/zerovec-derive,
pkg:npm/cspell/dict-en-common-misspellings,
pkg:npm/prettier