mirror of
https://github.com/UNITRONIX/BetterDesk.git
synced 2026-09-11 01:55:43 +00:00
UNITRONIX
feb3d19987
- Updated .gitignore to include new binary paths and retain .gitkeep. - Modified Gitleaks configuration to ignore additional directories. - Adjusted CI workflows to prevent execution on version bump pushes and improved version bump handling in scripts. - Bumped BetterDesk Console Manager version to 3.3.136 in betterdesk.sh and related scripts.
65 lines
1.8 KiB
YAML
65 lines
1.8 KiB
YAML
# Tauri desktop clients — cargo audit on push/PR
|
|
name: Rust Security CI
|
|
|
|
on:
|
|
push:
|
|
branches: [main, dev]
|
|
paths:
|
|
- 'rdclient-desktop/src-tauri/**'
|
|
- 'betterdesk-agent-client/src-tauri/**'
|
|
- '.github/workflows/rust-security-ci.yml'
|
|
pull_request:
|
|
branches: [main, dev]
|
|
paths:
|
|
- 'rdclient-desktop/src-tauri/**'
|
|
- 'betterdesk-agent-client/src-tauri/**'
|
|
- '.github/workflows/rust-security-ci.yml'
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
# glib RUSTSEC-2024-0429: transitive via Tauri GTK3/webkit2gtk; no fix without stack migration.
|
|
env:
|
|
CARGO_AUDIT_IGNORE: RUSTSEC-2024-0429
|
|
|
|
jobs:
|
|
cargo-audit-rdclient:
|
|
if: github.event_name != 'push' || !contains(github.event.head_commit.message, '[version-bump]')
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: rdclient-desktop/src-tauri
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions-rust-lang/setup-rust-toolchain@v1
|
|
with:
|
|
toolchain: stable
|
|
cache: true
|
|
|
|
- name: Install cargo-audit
|
|
run: cargo install cargo-audit --locked
|
|
|
|
- name: cargo audit (rdclient-desktop)
|
|
run: cargo audit --ignore ${{ env.CARGO_AUDIT_IGNORE }}
|
|
|
|
cargo-audit-agent-client:
|
|
if: github.event_name != 'push' || !contains(github.event.head_commit.message, '[version-bump]')
|
|
runs-on: ubuntu-latest
|
|
defaults:
|
|
run:
|
|
working-directory: betterdesk-agent-client/src-tauri
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions-rust-lang/setup-rust-toolchain@v1
|
|
with:
|
|
toolchain: stable
|
|
cache: true
|
|
|
|
- name: Install cargo-audit
|
|
run: cargo install cargo-audit --locked
|
|
|
|
- name: cargo audit (betterdesk-agent-client)
|
|
run: cargo audit --ignore ${{ env.CARGO_AUDIT_IGNORE }}
|