Skip to content

Support podman in make dev-tor #364

Support podman in make dev-tor

Support podman in make dev-tor #364

Workflow file for this run

name: Security
on:
push:
pull_request:
merge_group:
schedule:
- cron: '0 3 * * *'
jobs:
rust-audit:
runs-on: ubuntu-latest
# Keep version in sync with rust-toolchain.toml
container: rust:1.78.0
steps:
- uses: actions/checkout@v4
- name: Check Rust dependencies
run: |
make rust-audit
static-analysis-and-no-known-cves:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v5
with:
python-version: '3.8'
- name: Install dependencies
run: |
pip install safety semgrep
- name: Check Python dependencies for CVEs
run: |
make safety
- name: Run static security testing on source code with semgrep
run: |
make semgrep