build(security): add locked dependency audit gate

Add one just recipe that scans Cargo.lock with the current RustSec database and deno.lock with Deno's advisory service.

Test Plan:
- just security-audit (no known vulnerabilities; seven RustSec informational warnings)
- just --fmt --check
- git diff --check
This commit is contained in:
2026-09-12 13:15:28 +02:00
parent 67ea355599
commit 8f8072ffb6
+5
View File
@@ -77,6 +77,11 @@ test:
mdns-vendor-test: mdns-vendor-test:
cargo test --manifest-path vendor/mdns-sd/Cargo.toml --all-targets --all-features cargo test --manifest-path vendor/mdns-sd/Cargo.toml --all-targets --all-features
# Check both locked backend and frontend dependency graphs.
security-audit:
cargo audit
cd crates/lanspread-tauri-deno-ts && deno audit --lock deno.lock --frozen-lockfile
# Regenerate the committed acceptance catalogs from their fixture packages. # Regenerate the committed acceptance catalogs from their fixture packages.
fixture-catalogs: fixture-catalogs:
cargo run -p lanspread-compat --bin lanspread-fixture-catalog -- \ cargo run -p lanspread-compat --bin lanspread-fixture-catalog -- \