googleapis / googleapis/google-cloud-rust
Run a nightly CI with the results from `cargo-audit`
Open
type: cleanup
- Dominant language
- Rust
- Stars
- 955
- Forks
- 144
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 279
Description
`cargo-audit` can report new CVEs in our dependency graph. We should run a nightly CI that reports any new CVEs (and we need to keep an ignore list).
This is not suitable for PRs because new CVEs can appear at random and we do not want to block development on them.
Contributor guide
Assessment
This issue has not been assessed yet.