From 4448165ccf62758d219374ed5544fbb591798777 Mon Sep 17 00:00:00 2001
From: shashial <10578726+shashial@users.noreply.github.com>
Date: Thu, 20 Aug 2026 19:13:48 +0100
Subject: [PATCH 1/3] Make builds include a dependency list using
 cargo-auditable.

---
 .github/workflows/rproxy_release.yaml | 2 ++
 Dockerfile                            | 2 ++
 build.sh                              | 2 +-
 3 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/rproxy_release.yaml b/.github/workflows/rproxy_release.yaml
index 9b5bed3..ab10a67 100644
--- a/.github/workflows/rproxy_release.yaml
+++ b/.github/workflows/rproxy_release.yaml
@@ -90,6 +90,8 @@ jobs:
             libssl-dev \
             pkg-config
           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+          . $HOME/.cargo/env
+          cargo install cargo-auditable --version 0.7.5 --locked
 
       - name: checkout the repository
         uses: actions/checkout@v4
diff --git a/Dockerfile b/Dockerfile
index 2fcfae9..8a6cb3f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,6 +9,8 @@ RUN rustup component add \
     clippy \
     rustfmt
 
+RUN cargo install cargo-auditable --version 0.7.5 --locked
+
 ENV CARGO_HOME=/usr/local/cargo
 
 FROM base AS builder
diff --git a/build.sh b/build.sh
index 6c3b950..e978bee 100755
--- a/build.sh
+++ b/build.sh
@@ -26,7 +26,7 @@ export CARGO_TARGET_$( echo "${TARGET}" | tr '[:lower:]' '[:upper:]' | tr '-' '_
   -C target-feature=+crt-static \
 "
 
-cargo build --package rproxy \
+cargo auditable build --package rproxy \
   --features ${FEATURES} \
   --locked \
   --release \

From c20aae506157f4f924fcbc4c1e43edc0233a6e64 Mon Sep 17 00:00:00 2001
From: shashial <10578726+shashial@users.noreply.github.com>
Date: Thu, 20 Aug 2026 19:56:10 +0100
Subject: [PATCH 2/3] fix: move RUN after ENV command

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 8a6cb3f..7d19179 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -9,10 +9,10 @@ RUN rustup component add \
     clippy \
     rustfmt
 
-RUN cargo install cargo-auditable --version 0.7.5 --locked
-
 ENV CARGO_HOME=/usr/local/cargo
 
+RUN cargo install cargo-auditable --version 0.7.5 --locked
+
 FROM base AS builder
 
 WORKDIR /app

From bc0ddbbafb7f95b104a69ce56151cbe2df867416 Mon Sep 17 00:00:00 2001
From: shashial <10578726+shashial@users.noreply.github.com>
Date: Tue, 1 Sep 2026 17:41:35 +0100
Subject: [PATCH 3/3] check for the cargo-auditable existence

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
---
 build.sh | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/build.sh b/build.sh
index e978bee..3f19a68 100755
--- a/build.sh
+++ b/build.sh
@@ -26,6 +26,11 @@ export CARGO_TARGET_$( echo "${TARGET}" | tr '[:lower:]' '[:upper:]' | tr '-' '_
   -C target-feature=+crt-static \
 "
 
+if ! command -v cargo-auditable >/dev/null 2>&1; then
+  echo "cargo-auditable is required. Install with: cargo install cargo-auditable --version 0.7.5 --locked" >&2
+  exit 1
+fi
+
 cargo auditable build --package rproxy \
   --features ${FEATURES} \
   --locked \