From e59bf5b73e9a8457f40858e16bd8ee91ee90a660 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 22 Sep 2026 05:03:32 +0000 Subject: [PATCH] ci(supply-chain): install cargo-deny on runner instead of Docker The EmbarkStudios/cargo-deny-action image build downloads the musl binary via curl during docker build; a transient bad response caused gzip: invalid magic and left PR checks red while a parallel run passed. Use taiki-e/install-action on the ubuntu runner like our other tooling jobs so supply-chain checks do not depend on a fresh Docker layer build. Co-authored-by: Alexander Wagner --- .github/workflows/supply-chain.yml | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml index f1e57f2b..a007d819 100644 --- a/.github/workflows/supply-chain.yml +++ b/.github/workflows/supply-chain.yml @@ -35,7 +35,11 @@ jobs: with: persist-credentials: false - - uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1 - with: - manifest-path: ${{ matrix.manifest }} - command: check ${{ matrix.checks }} + - name: Install Rust + uses: dtolnay/rust-toolchain@6bed0761d98439e5a578e2877258200ad565ba87 # stable + + - name: Install cargo-deny + uses: taiki-e/install-action@deb6b2ccc5004cae3fb73fe4dcd60492786cb1dd # cargo-deny + + - name: Run cargo-deny + run: cargo deny --log-level warn --manifest-path "${{ matrix.manifest }}" --all-features check ${{ matrix.checks }}