Dockerfile: drop cargo-audit (libgit2-sys broken); cargo-deny supersedes

This commit is contained in:
Kayos 2026-04-29 14:40:27 -07:00
parent e268986f87
commit 64415348ce

View file

@ -214,8 +214,12 @@ RUN curl -fsSL https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --p
# mount, so cargo install artifacts there disappear inside the live container.
USER root
RUN /home/crafter/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin/cargo install \
--locked --root /usr/local cargo-audit cargo-deny \
&& chmod 755 /usr/local/bin/cargo-audit /usr/local/bin/cargo-deny
--locked --root /usr/local cargo-deny \
&& chmod 755 /usr/local/bin/cargo-deny
# cargo-audit was historically here but its `git2` C-binding dep needs
# libgit2-sys which fails in this base. cargo-deny supersedes it for our
# use: `cargo deny check advisories` does the same RustSec-DB scan that
# cargo-audit does. The rust audit recipe uses cargo-deny accordingly.
USER crafter
# ============================================================