Skip to content

Let the audit job report its check and update tokio and chacha20 - #20

Merged
Ssebv merged 1 commit into
mainfrom
ci/audit-permissions
Nov 2, 2026
Merged

Ssebv merged 1 commit into
mainfrom
ci/audit-permissions

Conversation

@Ssebv

@Ssebv Ssebv commented Nov 2, 2026

Copy link
Copy Markdown
Owner

cargo audit reports no vulnerabilities on main, but the job fails: with warnings present, the action creates a check run, and the default token is read-only. This grants checks: write to that job and updates tokio and chacha20, the source of the two warnings.

The audit action creates a check run when there are warnings, and the default token is read-only, so the job failed on main with no vulnerabilities.
@Ssebv
Ssebv merged commit 74ac01c into main Nov 2, 2026
6 checks passed
@Ssebv
Ssebv deleted the ci/audit-permissions branch November 2, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant