Skip to content

Commit d56efd4

Browse files
committed
Exclude ci directory from packaged crate
I do not think there is compelling reason to release the ci support as part of a Rust source code package. In addition, the crate, as it is released now, gets flagged in some security scans due to the presence of Dockerfiles which are considered to be following some unsafe practices. Most Linux distros package using the vendored appraoch and provide a vendor tarfile of an application's dependencies. Scanners will tend to expect that the contents of the vendor tarfile will be source code. These Dockerfiles are already being flagged by some scanners; other contents of the ci directory may be flagged in future.
1 parent 5100331 commit d56efd4

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

compiler-builtins/libm/Cargo.toml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,7 @@ readme = "README.md"
1010
repository = "https://github.com/rust-lang/libm"
1111
version = "0.2.7"
1212
edition = "2018"
13+
exclude = ["/ci/"]
1314

1415
[features]
1516
default = []

0 commit comments

Comments
 (0)