eclipse-iceoryx / eclipse-iceoryx/iceoryx2

Add `cargo audit` CI target

Open
#400 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
2.5k
Forks
185
Avg merge
1d 23h
Merged PRs (30d)
47

Description

## Brief feature description

Can be installed with `cargo install cargo-audit` and run with `cargo audit`.

It lists all known security advisories/warnings from all dependencies. The goal would be that iceorx2 does not depend on any package that has known security issues.

A CI target shall verify it. The problem is that a security issue of an unmaintained package may cause a lot of effort on our side to fix it. So it should be an optional target that does not block the CI but informs us so that we can take action.

Contributor guide

Open the contributing guide

Research direction

Start by locating the repository's existing CI configuration and checking how Rust dependency checks are run. Add an optional CI target that runs cargo audit, reports known advisories without blocking CI, and confirms that the check is visible for follow-up.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
ci-cd, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.