Better test coverage for MPC context lifecycle (PR 3/7) #6784
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: dependencies_analysis | |
| on: | |
| push: | |
| branches: | |
| - main | |
| - test | |
| pull_request: | |
| branches: ['*'] | |
| concurrency: | |
| group: deps-analysis-${{ github.ref }} | |
| cancel-in-progress: ${{ github.ref != 'refs/heads/main' }} | |
| permissions: | |
| contents: read # Required to checkout repository code | |
| jobs: | |
| dependencies-check: | |
| name: dependencies_analysis/dependencies-check (bpr) | |
| runs-on: ubuntu-latest | |
| steps: | |
| # TODO: remove once GitHub runner images ship the CVE-2026-31431 kernel fix | |
| - name: Workaround CVE-2026-31431 (copy.fail) | |
| run: | | |
| echo "install algif_aead /bin/false" | sudo tee /etc/modprobe.d/disable-algif-aead.conf | |
| if lsmod | grep -q algif_aead; then | |
| sudo rmmod algif_aead || echo "WARNING: rmmod failed - module may be in use" | |
| elif modinfo algif_aead 2>/dev/null | grep -q builtin; then | |
| echo "WARNING: algif_aead built-in - modprobe.d blacklist has no effect" | |
| fi | |
| - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 | |
| with: | |
| persist-credentials: false | |
| - name: Rust setup | |
| uses: ./.github/actions/setup-rust-and-protoc | |
| with: | |
| rust-toolchain: stable | |
| rust-cache: "false" | |
| setup-protoc: "false" | |
| # to calculate hash use `curl -s https://api.github.com/repos/cargo-bins/cargo-binstall/git/refs/tags/v1.16.4 | jq -r .object.sha` | |
| - name: Install cargo-binstall | |
| uses: cargo-bins/cargo-binstall@ea60fcf749c6a52a729e0eaabb5eb33391d44823 # v1.16.4 | |
| # Use cargo-binstall to efficiently install required cargo tools with versiones specified | |
| - name: Install cargo tools | |
| run: | | |
| cargo binstall --no-confirm --force \ | |
| cargo-audit@0.22.0 \ | |
| cargo-deny@0.18.9 | |
| - name: Check that Cargo.lock is the source of truth | |
| run: cargo update -w --locked | |
| - name: License whitelist | |
| run: cargo-deny deny check license --deny license-not-encountered | |
| - name: Security issue whitelist | |
| run: cargo-audit audit |