deny.yml - mozsearch

Enable keyboard shortcuts

name: Deny

on:

  workflow_dispatch:

  pull_request:

    branches: ["main"]

  merge_group:

concurrency:

  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}

  cancel-in-progress: true

permissions:

  contents: read

jobs:

  deny:

    name: cargo deny

    runs-on: ubuntu-24.04

    strategy:

      matrix:

        checks:

          - advisories

          - bans licenses sources

    # Prevent sudden announcement of a new advisory from failing ci:

    continue-on-error: ${{ matrix.checks == 'advisories' }}

    steps:

    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

      with:

        persist-credentials: false

    - uses: EmbarkStudios/cargo-deny-action@3fd3802e88374d3fe9159b834c7714ec57d6c979 # v2.0.15

      with:

        command: check ${{ matrix.checks }}