ci: add an audit target

.woodpecker.yml

@@ -12,6 +12,19 @@ pipeline:
       - earthly bootstrap
       - earthly +lint
 
+  # audit:
+  #   image: earthly/earthly:v0.7.15
+  #   volumes:
+  #     - /var/run/docker.sock:/var/run/docker.sock
+  #   environment:
+  #     - FORCE_COLOR=1
+  #     - EARTHLY_EXEC_CMD="/bin/sh"
+  #   secrets: [EARTHLY_CONFIGURATION]
+  #   commands:
+  #     - mkdir ~/.earthly && echo "$EARTHLY_CONFIGURATION" > ~/.earthly/config.yaml
+  #     - earthly bootstrap
+  #     - earthly +audit
+
   test:
     image: earthly/earthly:v0.7.15
     volumes:

Earthfile

@@ -103,6 +103,23 @@ lint-jslib:
   WORKDIR tools/upend_js
   RUN pnpm lint
 
+audit:
+  WAIT
+    BUILD +audit-backend
+    BUILD +audit-frontend
+  END
+
+audit-backend:
+  FROM +base-rust
+  RUN cargo audit --workspace
+
+audit-frontend:
+  FROM +base-node
+  COPY +jslib/jslib tools/upend_js
+  WORKDIR webui
+  RUN pnpm install --frozen-lockfile
+  RUN pnpm audit
+
 test:
   WAIT
     BUILD +test-backend
@@ -144,6 +161,7 @@ base-rust:
   RUN rustup component add clippy
   RUN curl -LsSf https://get.nexte.st/latest/linux | tar zxf - -C /usr/local/cargo/bin
   RUN cargo install wasm-pack wasm-bindgen-cli && rustup target add wasm32-unknown-unknown
+  RUN cargo install cargo-audit
   WORKDIR /upend
   COPY Cargo.toml Cargo.lock .
   COPY base/Cargo.toml base/Cargo.toml