File tree Expand file tree Collapse file tree 6 files changed +150
-182
lines changed Expand file tree Collapse file tree 6 files changed +150
-182
lines changed Original file line number Diff line number Diff line change @@ -136,8 +136,11 @@ jobs:
136136
137137 # Step 3: Run security audit on dependencies
138138 # This checks for known security vulnerabilities in our dependencies
139+ # We ignore RUSTSEC-2023-0071 (RSA timing sidechannel) as it's a transitive
140+ # dependency through sqlx-mysql with no fix available, and poses minimal
141+ # risk for educational examples that don't handle sensitive RSA operations
139142 - name : Run security audit
140- run : cargo audit
143+ run : cargo audit --ignore RUSTSEC-2023-0071
141144
142145 # Step 4: Check for vulnerabilities in our Cargo.lock file
143146 - name : Check advisories
@@ -168,11 +171,10 @@ jobs:
168171 env :
169172 RUSTDOCFLAGS : " -D warnings"
170173
171- # Step 5: Check that all public items have documentation
172- - name : Check documentation coverage
174+ # Step 5: Check that documentation builds without errors
175+ # Note: We don't enforce missing-docs for examples since they are educational code
176+ - name : Check documentation builds
173177 run : cargo doc --all --no-deps
174- env :
175- RUSTDOCFLAGS : " -D missing-docs"
176178
177179 # Job 5: Dependency review for supply chain security
178180 dependency-review :
You can’t perform that action at this time.
0 commit comments