diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9e69a22..0ccba7a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -58,19 +58,14 @@ jobs: name: Capability Audit runs-on: ubuntu-latest permissions: + contents: read security-events: write + pull-requests: write steps: - uses: actions/checkout@v4 - uses: dtolnay/rust-toolchain@master with: toolchain: "1.94.0" - - run: cargo build -p cargo-capsec - - run: cargo run -p cargo-capsec -- capsec audit --fail-on high --quiet - - name: Generate SARIF report - if: always() - run: cargo run -p cargo-capsec -- capsec audit --format sarif > capsec.sarif - - name: Upload SARIF to GitHub Code Scanning - if: always() - uses: github/codeql-action/upload-sarif@v3 + - uses: bordumb/capsec-github-action@v1 with: - sarif_file: capsec.sarif + fail-on: high diff --git a/Cargo.lock b/Cargo.lock index 63ca50d..d9641ae 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -91,7 +91,7 @@ checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33" [[package]] name = "capsec" -version = "0.1.0" +version = "0.1.1" dependencies = [ "capsec-core", "capsec-macro", @@ -103,14 +103,14 @@ dependencies = [ [[package]] name = "capsec-core" -version = "0.1.0" +version = "0.1.1" dependencies = [ "thiserror", ] [[package]] name = "capsec-macro" -version = "0.1.0" +version = "0.1.1" dependencies = [ "proc-macro2", "quote", @@ -119,14 +119,14 @@ dependencies = [ [[package]] name = "capsec-std" -version = "0.1.0" +version = "0.1.1" dependencies = [ "capsec-core", ] [[package]] name = "capsec-tests" -version = "0.1.0" +version = "0.1.1" dependencies = [ "capsec", "capsec-core", @@ -138,7 +138,7 @@ dependencies = [ [[package]] name = "capsec-tokio" -version = "0.1.0" +version = "0.1.1" dependencies = [ "capsec-core", "capsec-macro", @@ -147,7 +147,7 @@ dependencies = [ [[package]] name = "cargo-capsec" -version = "0.1.0" +version = "0.1.1" dependencies = [ "capsec-core", "capsec-std", diff --git a/Cargo.toml b/Cargo.toml index 1051fc0..6bbd2e7 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -14,7 +14,7 @@ exclude = [ ] [workspace.package] -version = "0.1.0" +version = "0.1.1" edition = "2024" rust-version = "1.85.0" readme = "README.md"