Skip to content

ci(audit): add new nightly cargo audit job#200

Open
oleonardolima wants to merge 1 commit intobitcoindevkit:masterfrom
oleonardolima:ci/add-nightly-audit-job
Open

ci(audit): add new nightly cargo audit job#200
oleonardolima wants to merge 1 commit intobitcoindevkit:masterfrom
oleonardolima:ci/add-nightly-audit-job

Conversation

@oleonardolima
Copy link
Collaborator

Description

As I was going through the recent audit issues in bdk and bdk_wallet I noticed this nightly job was missing here.

I've added the new audit.yml job in CI and also added the .cargo/audit.toml in case we need to ignore any unapplicable advisories in the future.

Changelog notice


### Added

- ci(audit): add new nightly `cargo audit` job
- chore: add new `.cargo/audit.toml`

Checklists

All Submissions:

@oleonardolima oleonardolima self-assigned this Mar 25, 2026
@oleonardolima oleonardolima added the ci Continuous Integration issues label Mar 25, 2026
- add new `audit.yml` CI job.
- add new `.cargo/audit.toml`.
@oleonardolima oleonardolima force-pushed the ci/add-nightly-audit-job branch from 62b435e to 4dfe205 Compare March 25, 2026 20:28
- '.github/workflows/audit.yml'
# Run on changed dependencies
- '**/Cargo.toml'
- '**/Cargo.lock'
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We don't commit the lockfile (yet). This can be added once the switch to cargo-rbmt is done here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci Continuous Integration issues

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants