f213663d5bMake the network-touching install and download steps in the security-audit workflow resilient to transient failures without relaxing any integrity check. - Add top-level retry and backoff env knobs for pip, cargo, and npm. - Wrap the pip-audit + cargo install and npm ci steps in an exponential-backoff retry helper, preserving --locked and --ignore-scripts. - Re-pin swatinem/rust-cache to the v2.9.1 commit so the SHA matches its comment. - Split the OSV-Scanner download and SHA-256 verification into a hard-gated step: a checksum mismatch fails the job, while a transient download failure skips the scan; the advisory scan stays non-blocking. |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| scripts | ||
| workflows | ||
| CODEOWNERS | ||
| dependabot.yml | ||
| FUNDING.yml | ||