Files
advisory-db/.github/workflows/export-osv.yml
dependabot[bot] c88b5f38f2 Bump actions/cache from 3 to 4 (#1862)
Bumps [actions/cache](https://github.com/actions/cache) from 3 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-22 08:08:15 -07:00

32 lines
872 B
YAML

name: Export to OSV format
on:
push:
branches: main
jobs:
publish-web:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
ref: osv
- uses: actions/cache@v4
with:
path: ~/.cargo/bin
key: rustsec-admin-v0.8.8
- run: |
VERSION="0.8.8"
if ! ( rustsec-admin --version | grep -q "$VERSION" ); then
cargo install rustsec-admin --force --vers "$VERSION"
fi
mkdir -p crates
rustsec-admin osv crates
# FIXME: hack to avoid committing advisories without an ID
rm -f crates/RUSTSEC-0000-0000.json
git config user.name github-actions
git config user.email github-actions@github.com
git add .
git commit -m "Update OSV exported data" || true
git push || true