Add advisory for curve25519-dalek timing variability (#1981) #813
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Export to OSV format | |
on: | |
push: | |
branches: main | |
jobs: | |
publish-web: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
ref: osv | |
- uses: actions/cache@v4 | |
with: | |
path: ~/.cargo/bin | |
key: rustsec-admin-v0.8.8 | |
- run: | | |
VERSION="0.8.8" | |
if ! ( rustsec-admin --version | grep -q "$VERSION" ); then | |
cargo install rustsec-admin --force --vers "$VERSION" | |
fi | |
mkdir -p crates | |
rustsec-admin osv crates | |
# FIXME: hack to avoid committing advisories without an ID | |
rm -f crates/RUSTSEC-0000-0000.json | |
git config user.name github-actions | |
git config user.email [email protected] | |
git add . | |
git commit -m "Update OSV exported data" || true | |
git push || true |