Skip to content

fix(secret): stop the mlock guard from aborting the app on drop #3006

fix(secret): stop the mlock guard from aborting the app on drop

fix(secret): stop the mlock guard from aborting the app on drop #3006

Workflow file for this run

name: Clippy
# Path filters below fire on any change that can affect a lint or fmt result,
# and on nothing that cannot. `**/*.rs` covers build.rs and every crate's
# sources; documentation changes deliberately match nothing.
on:
push:
branches:
- "v*-dev"
paths: &code_paths
- "**/*.rs" # includes build.rs
- "**/Cargo.toml"
- "Cargo.lock"
- ".cargo/config.toml"
- "rust-toolchain.toml"
- ".github/workflows/clippy.yml"
pull_request:
types: [opened, synchronize, reopened, ready_for_review]
paths: *code_paths
# Allows a manual run against a branch. Draft PRs are suppressed by the
# `draft != true` guard below and otherwise have no way to run CI at all; a
# manual run covers them. Note it tests the branch head, not the PR merge
# commit, so it does not prove the merged result is green.
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
env:
CARGO_TERM_COLOR: always
jobs:
clippy:
name: Clippy
if: github.event.pull_request.draft != true
runs-on: ubuntu-latest
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Cache Cargo registry
uses: actions/cache@v4
with:
path: |
~/.cargo/registry
~/.cargo/git
key: ${{ runner.os }}-cargo-registry-${{ hashFiles('**/Cargo.lock') }}
restore-keys: |
${{ runner.os }}-cargo-registry-
# No `toolchain` or `components` input: the action installs the channel and
# the components rust-toolchain.toml pins, so a bump there is linted by the
# compiler it introduces. Naming a version here would duplicate that pin
# and silently keep linting the old compiler after the file moved on.
- name: Install Rust toolchain
uses: actions-rust-lang/setup-rust-toolchain@v1
with:
# This action defaults RUSTFLAGS to "-D warnings". The Clippy step
# already passes `-D warnings` itself, and setting it globally would
# also deny warnings for the fmt check's build — keep it unset.
rustflags: ""
# Cargo caching is handled by the actions/cache step above.
cache: false
- name: Install system dependencies
run: |
sudo apt-get update
sudo apt-get install -y build-essential pkg-config clang cmake libsqlite3-dev
- name: Install protoc
run: |
curl -OL https://github.com/protocolbuffers/protobuf/releases/download/v25.2/protoc-25.2-linux-x86_64.zip
sudo unzip -o protoc-25.2-linux-x86_64.zip -d /usr/local bin/protoc
sudo unzip -o protoc-25.2-linux-x86_64.zip -d /usr/local 'include/*'
rm -f protoc-25.2-linux-x86_64.zip
env:
PROTOC: /usr/local/bin/protoc
- name: Check formatting
run: cargo fmt --all -- --check
- name: Run Clippy
uses: actions-rs/clippy-check@v1
with:
token: ${{ secrets.GITHUB_TOKEN }}
args: --all-features --all-targets -- -D warnings
name: Clippy Report