build: manually clone advisory-db repo
Use the git CLI to pull the advisory-db repo, instead of letting
cargo-deny do it as it seems to ignore the "pull with CLI" cargo
setting:
Potentially related to GitHub killing old key support today:
@@ -124,9 +124,17 @@ jobs:
- run:
name: Install cargo-deny
command: cargo install --force cargo-deny
+ - run:
+ # Manually pull the advisory DB with the git CLI as cargo deny seems
+ # to ignore CARGO_NET_GIT_FETCH_WITH_CLI.
+ #
+ # https://github.com/EmbarkStudios/cargo-deny/issues/388
+ name: Pull advisory-db
+ command: |
+ git clone --depth=1 https://github.com/RustSec/advisory-db.git /usr/local/cargo/advisory-dbs/github.com-dfdf83aac62a7e5e
- run:
name: cargo-deny Checks
- command: cargo deny check -s
+ command: cargo deny check -s --disable-fetch
- cache_save
doc:
docker:
