Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases 1 Activity

projection: repin the Rust toolchain action

Browse source 
The public workflows retain a reachable immutable Rust setup action for the named Linux capability.

Source-Sha: e8c500c91232b888d35662313553c9332bb98636

Policy-Sha: e8c500c91232b888d35662313553c9332bb98636

Tree-Digest: 881641293edc6e190f34e290fc37c81d1b3cc39341824afbe99b17c9fab21a2d
This commit is contained in:
Fimeg 2026-09-09 20:49:08 -04:00
commit 1370ae9c76
3 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

8
.gitea/workflows/ci.yml
View file

@ -74,7 +74,7 @@ jobs:
runs-on: redflag-linux-build
steps:
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
with:
components: clippy
- name: cargo test
@ -118,7 +118,7 @@ jobs:
with:
go-version-file: agent/go.mod
cache: true
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
with:
targets: ${{ matrix.rust_target }}
@ -176,7 +176,7 @@ jobs:
with:
go-version-file: agent/go.mod
cache: true
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
- name: Install Qt 6 build dependencies
run: |
sudo apt-get update -qq
@ -245,7 +245,7 @@ jobs:
node-version: 20
cache: npm
cache-dependency-path: web/package-lock.json
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
# Provenance first: record the substrate even if a later scan fails the job.
# "Are we using hacked programs to build it?" — this is how we SEE the answer.

2
.gitea/workflows/nightly.yml
View file

@ -79,7 +79,7 @@ jobs:
cache: npm
cache-dependency-path: web/package-lock.json
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
if: steps.pre.outputs.go == 'true'
- name: Build web UI and stage embed

4
.gitea/workflows/release.yml
View file

@ -229,7 +229,7 @@ jobs:
node-version: 20
cache: npm
cache-dependency-path: web/package-lock.json
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
- name: Install scanners
run: |
go install golang.org/x/vuln/cmd/govulncheck@latest
@ -289,7 +289,7 @@ jobs:
go-version-file: agent/go.mod
cache: true
- uses: dtolnay/rust-toolchain@4360b52568e2003a75bf9bc1d59f33a8e3fc893c # stable
- uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable
with:
targets: ${{ matrix.rust_target }}