Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 28 additions & 0 deletions .github/workflows/reusable/cargo-deny.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
# Reusable cargo-deny — call from consumer repos:
# jobs:
# cargo-deny:
# uses: KooshaPari/phenotype-tooling/.github/workflows/reusable/cargo-deny.yml@main
name: Reusable cargo-deny

on:
workflow_call:

permissions:
contents: read

jobs:
cargo-deny:
runs-on: ubuntu-24.04
steps:
- name: Checkout
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.2.2

- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9
with:
toolchain: stable

- name: Run cargo-deny
uses: EmbarkStudios/cargo-deny-action@91bf2b620e09e18d6eb78b92e7861937469acedb # v6
with:
rust-version: stable
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate reusable workflow without removing original

Low Severity

This new file is a full duplicate of reusable-cargo-deny.yml (only the comment path differs). The internal caller .github/workflows/cargo-deny.yml still references the old flat path, so both copies will coexist. Future updates to one (e.g., bumping action pins or changing the runner) risk not being applied to the other, leading to drift between the two identical workflows.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 4ab44a5. Configure here.

Loading