mirror of
https://github.com/bevyengine/bevy
synced 2024-11-26 06:30:19 +00:00
39271f24d2
# Objective #2230 allowed the CI to run on every Branch of this Repo. But some Branches should not actually run the CI, which wastes the available capacity of CI runners. ### staging-squash-merge.tmp This Branch is used by Bors when squashing a PR. CI shouldn't need to run here, as the actual verification happens in the staging branch   ### dependabot/** Dependabot creates its branches in this Repo, which causes the CI to run twice on the same commit  ## Solution Exclude those branches from running CI.
56 lines
1.3 KiB
YAML
56 lines
1.3 KiB
YAML
name: Dependencies
|
|
|
|
on:
|
|
pull_request:
|
|
paths:
|
|
- '**/Cargo.toml'
|
|
- 'deny.toml'
|
|
push:
|
|
paths:
|
|
- '**/Cargo.toml'
|
|
- 'deny.toml'
|
|
branches-ignore:
|
|
- 'dependabot/**'
|
|
- staging-squash-merge.tmp
|
|
schedule:
|
|
- cron: "0 0 * * 0"
|
|
|
|
env:
|
|
CARGO_TERM_COLOR: always
|
|
|
|
jobs:
|
|
check-advisories:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- name: Install cargo-deny
|
|
run: cargo install cargo-deny
|
|
- name: Check for security advisories and unmaintained crates
|
|
run: cargo deny check advisories
|
|
|
|
check-bans:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- name: Install cargo-deny
|
|
run: cargo install cargo-deny
|
|
- name: Check for banned and duplicated dependencies
|
|
run: cargo deny check bans
|
|
|
|
check-licenses:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- name: Install cargo-deny
|
|
run: cargo install cargo-deny
|
|
- name: Check for unauthorized licenses
|
|
run: cargo deny check licenses
|
|
|
|
check-sources:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v2
|
|
- name: Install cargo-deny
|
|
run: cargo install cargo-deny
|
|
- name: Checked for unauthorized crate sources
|
|
run: cargo deny check sources
|