ci: add --locked to cargo-audit install

Signed-off-by: Jose Storopoli <[email protected]>
alpenlabs · Nov 29, 2024 · 34a660a · 34a660a
1 parent 24a02aa
commit 34a660a
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -22,9 +22,10 @@ jobs:
           cache-on-failure: true
 
       - name: Install cargo-audit
-        run: cargo install cargo-audit --force
+        run: cargo install --locked cargo-audit --force
 
-        #  HACK: not denying warnings as we depend on `yaml-rust` via `format-serde-error` which is unmaintained
+        #  HACK: not denying warnings as we depend on `yaml-rust` via `format-serde-error`
+        #        which is unmaintained
       - name: Check for audit warnings
         run: cargo audit -D warnings
         continue-on-error: true