eclipse-iceoryx / eclipse-iceoryx/iceoryx2
Add `cargo audit` CI target
- Dominant language
- Rust
- Stars
- 2.5k
- Forks
- 185
- Avg merge
- 1d 23h
- Merged PRs (30d)
- 47
Description
## Brief feature description
Can be installed with `cargo install cargo-audit` and run with `cargo audit`.
It lists all known security advisories/warnings from all dependencies. The goal would be that iceorx2 does not depend on any package that has known security issues.
A CI target shall verify it. The problem is that a security issue of an unmaintained package may cause a lot of effort on our side to fix it. So it should be an optional target that does not block the CI but informs us so that we can take action.
Contributor guide
Research direction
Start by locating the repository's existing CI configuration and checking how Rust dependency checks are run. Add an optional CI target that runs cargo audit, reports known advisories without blocking CI, and confirms that the check is visible for follow-up.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- rust
- Domain
- ci-cd, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100