please allow embarkstudios/cargo-deny-action in mozilla/sccache/
Categories
(mozilla.org :: Github: Administration, task)
Tracking
(Not tracked)
People
(Reporter: Sylvestre, Assigned: cknowles)
References
Details
In sccache, we would like to be able to use cargo-deny to evaluate our dependency tree.
For this, we are using https://github.com/EmbarkStudios/cargo-deny-action
and it would be great to have it enabled for sccache
See
https://github.com/mozilla/sccache/pull/1418
for the PR
thanks
|
Assignee | |
Comment 1•3 years ago
|
||
Alright, I've checked out list of approved actions here and that isn't in the list - so I will needinfo the fine folks in secops to take a look and ask their questions.
|
|
||
Comment 2•3 years ago
|
||
:Sylvestre - In your opinion, how much would you trust Embark Studios? No right or wrong answer, we just have not yet encountered them yet and wanted to field your thoughts.
|
Reporter | |
Comment 3•3 years ago
|
||
They are very active in the rust world, They contribute to a bunch of floss software, we collaborate on some projects ( https://hacks.mozilla.org/2022/06/everything-is-broken-shipping-rust-minidump-at-mozilla/ for example) and last but not least, Benjamin Bouvier (former Mozilla employee) works there.
|
|
Reporter | |
Comment 4•3 years ago
|
||
asargent: are we good ? thanks
|
|
||
Comment 5•3 years ago
|
||
Hi :Sylvestre, looks good to me, :cknowles please allow for EmbarkStudios/*
I will update the approval list when I can, likely within the week.
|
|
Assignee | |
Comment 6•3 years ago
|
||
Alright EmbarkStudios/* has been added to teh allowed action list for the Mozilla org.
Sylvestre, let us know if there's any problems.
Description
•