security: close Critical and High findings in fix-gas #4
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Verify Critical High Security Fixes | |
| on: | |
| pull_request: | |
| branches: | |
| - fix-gas | |
| paths: | |
| - crates/kanari-core/** | |
| - crates/kanari-node/** | |
| - crates/kanari-frameworks/packages/kanari-system/** | |
| - move-execution/v1/kanari-move-runtime-v1/** | |
| - .github/workflows/apply-critical-high-fixes.yml | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: critical-high-verification-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| jobs: | |
| verify: | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 90 | |
| steps: | |
| - name: Checkout pull request | |
| uses: actions/checkout@v4 | |
| - name: Install pinned Rust toolchain | |
| run: rustup show | |
| - name: Verify formatting | |
| run: cargo fmt --all -- --check | |
| - name: Reject whitespace errors | |
| run: git diff --check | |
| - name: Check core, runtime, and node | |
| run: cargo check -p kanari-core -p kanari-move-runtime-v1 -p kanari-node --all-targets | |
| - name: Test core | |
| run: cargo test -p kanari-core --all-targets | |
| - name: Test Move runtime | |
| run: cargo test -p kanari-move-runtime-v1 --all-targets | |
| - name: Test node sync paths | |
| run: cargo test -p kanari-node --all-targets |