Merge pull request #39 from goto-opensource/feature/ci

ci: switch off of deprecated actions-rs actions

Author: hoodie

.github/workflows/audit.yml

@@ -15,68 +15,48 @@ jobs:
       matrix:
         rust:
           - stable
+          #- stable minus 2 releases
+          #- beta
         feature:
           - ring
           - openssl
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions-rs/toolchain@v1
+      - uses: actions/checkout@v4
+      - uses: Swatinem/rust-cache@v2
+      - uses: dtolnay/rust-toolchain@stable
         with:
-          profile: minimal
           toolchain: ${{ matrix.rust }}
-          override: true
-      - run: rustup component add clippy
+          components: clippy, rustfmt
 
-      - name: check
-        uses: actions-rs/cargo@v1
-        with:
-          command: check
-          args: --no-default-features --features ${{ matrix.feature }}
+      - name: check 
+        run: cargo check --no-default-features --features ${{ matrix.feature }}
 
       - name: check (benches)
-        uses: actions-rs/cargo@v1
-        with:
-          command: check
-          args: --benches --no-default-features --features ${{ matrix.feature }}
+        run: cargo check --benches --no-default-features --features ${{ matrix.feature }}
 
       - name: check (tests)
-        uses: actions-rs/cargo@v1
-        with:
-          command: check
-          args: --tests --no-default-features --features ${{ matrix.feature }}
+        run: cargo check --tests --no-default-features --features ${{ matrix.feature }}
 
       - name: test
-        uses: actions-rs/cargo@v1
-        with:
-          command: test
-          args: --no-default-features --features ${{ matrix.feature }}
+        run: cargo test --no-default-features --features ${{ matrix.feature }}
 
       - name: clippy
-        uses: actions-rs/cargo@v1
-        with:
-          command: clippy
-          args: --all-targets --no-default-features --features ${{ matrix.feature }} -- -Dwarnings
+        run: cargo clippy --all-targets --no-default-features --features ${{ matrix.feature }} -- -Dwarnings
 
       # test packaging to avoid surprisis at release time
       - name: package
-        uses: actions-rs/cargo@v1
-        with:
-          command: package
+        run: cargo package
 
 
   build-wasm:
     name: build wasm32
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions-rs/toolchain@v1
+      - uses: actions/checkout@v4
+      - uses: Swatinem/rust-cache@v2
+      - uses: dtolnay/rust-toolchain@stable
         with:
-          profile: minimal
           toolchain: stable
-          override: true
           target: wasm32-unknown-unknown 
       - name: build
-        uses: actions-rs/cargo@v1
-        with:
-          command: build
-          args: --target wasm32-unknown-unknown --features ring
+        run: cargo build --target wasm32-unknown-unknown --features ring

.github/workflows/build_test.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Install Rust toolchain

.github/workflows/ci_cd.yml

@@ -0,0 +1,28 @@
+name: Security audit
+
+on:
+  schedule:
+    - cron: '0 0 * * 0'
+  push:
+    paths:
+      - '**/Cargo.toml'
+      - '**/Cargo.lock'
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+
+  deny-check:
+    name: cargo-deny check
+    runs-on: ubuntu-latest
+    continue-on-error: ${{ matrix.checks == 'advisories' }}
+    strategy:
+      matrix:
+        checks:
+          - advisories
+          - bans licenses sources
+    steps:
+      - uses: actions/checkout@v4
+      - uses: EmbarkStudios/cargo-deny-action@v1
+        with:
+          command: check ${{ matrix.checks }}

.github/workflows/deny.yml

@@ -9,7 +9,7 @@ jobs:
     name: Check Commit Message
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # A PR should not contain too many commits
           fetch-depth: 10
@@ -27,16 +27,16 @@ jobs:
     name: Rustfmt
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions-rs/toolchain@v1
+      - uses: actions/checkout@v4
+      - uses: dtolnay/rust-toolchain@stable
         with:
-          profile: minimal
-          toolchain: stable
           components: rustfmt
+      - name: cargo-fmt
+        run: cargo fmt --all --check
 
   cargo-deny:
     name: Check licenses
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - uses: EmbarkStudios/cargo-deny-action@v1