File tree Expand file tree Collapse file tree 6 files changed +150
-182
lines changed Expand file tree Collapse file tree 6 files changed +150
-182
lines changed Original file line number Diff line number Diff line change @@ -136,8 +136,11 @@ jobs:
136
136
137
137
# Step 3: Run security audit on dependencies
138
138
# This checks for known security vulnerabilities in our dependencies
139
+ # We ignore RUSTSEC-2023-0071 (RSA timing sidechannel) as it's a transitive
140
+ # dependency through sqlx-mysql with no fix available, and poses minimal
141
+ # risk for educational examples that don't handle sensitive RSA operations
139
142
- name : Run security audit
140
- run : cargo audit
143
+ run : cargo audit --ignore RUSTSEC-2023-0071
141
144
142
145
# Step 4: Check for vulnerabilities in our Cargo.lock file
143
146
- name : Check advisories
@@ -168,11 +171,10 @@ jobs:
168
171
env :
169
172
RUSTDOCFLAGS : " -D warnings"
170
173
171
- # Step 5: Check that all public items have documentation
172
- - name : Check documentation coverage
174
+ # Step 5: Check that documentation builds without errors
175
+ # Note: We don't enforce missing-docs for examples since they are educational code
176
+ - name : Check documentation builds
173
177
run : cargo doc --all --no-deps
174
- env :
175
- RUSTDOCFLAGS : " -D missing-docs"
176
178
177
179
# Job 5: Dependency review for supply chain security
178
180
dependency-review :
You can’t perform that action at this time.
0 commit comments