Skip to content

Commit

Permalink
Exclude ci directory from packaged crate (#555)
Browse files Browse the repository at this point in the history
I do not think there is compelling reason to release the ci support as
part of a Rust source code package. In addition, the crate, as it is
released now, gets flagged in some security scans due to the presence of
Dockerfiles which are considered to be following some unsafe practices.
Most Linux distros package using the vendored appraoch and provide a
vendor tarfile of an application's dependencies. Scanners will tend to
expect that the contents of the vendor tarfile will be source code.
These Dockerfiles are already being flagged by some scanners; other
contents of the ci directory may be flagged in future.
  • Loading branch information
mulkieran committed Aug 18, 2023
1 parent d008d39 commit 037356f
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions Cargo.toml
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@ A library to acquire a stack trace (backtrace) at runtime in a Rust program.
autoexamples = true
autotests = true
edition = "2018"
exclude = ["/ci/"]

[workspace]
members = ['crates/cpp_smoke_test', 'crates/as-if-std']
Expand Down

0 comments on commit 037356f

Please sign in to comment.