Add cargo xtask commands for dependencies and vulnerabilities checks

[syl20bnr]

Checklist

• Confirmed that run-checks all script has been executed.
• Made sure the book is up to date with changes in this PR.

Related Issues/PRs

Fixes issue #965

Changes

This PR adds two new commands to cargo xtask:

• cargo xtask dependencies
• cargo xtask vulnerabilities

All the checks defined in our github workflows are added. I also implemented all the sanitizers. I did not thoroughly test all of them, some additional tweaks might be necessary.

I tried to be as clear as possible in the command line documentation so that users can just explore what is available and then the help should guide them in order to correctly execute the checks (for instance some checks need to be executed using a nightly toolchain). The cargo third-party commands should be automatically installed as well.

Dependencies documentation generation is also skipped with --no-deps.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (b9bd429) 84.46% compared to head (4673f6e) 84.46%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1181   +/-   ##
=======================================
  Coverage   84.46%   84.46%           
=======================================
  Files         546      546           
  Lines       61296    61296           
=======================================
  Hits        51774    51774           
  Misses       9522     9522           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[Luni-4]

Thanks a lot for your work!

Just simple changes and two questions:

Instead of having patterns such as "hi".to_string()", can we reduce allocations using std::borrow::Cow<'static, str>` in the code?

Can we add these new commands to CI?

[syl20bnr]

Thank you for the review, I pushed some fixes.

Instead of having patterns such as "hi".to_string()", can we reduce allocations using std::borrow::Cow<'static, str>` in the code?

Do you have a concrete example you can share ?

Can we add these new commands to CI?

I was planning to do that but in the end I prefer to open a different PR for this.

[Luni-4]

Do you have a concrete example you can share ?

I think the best examples could be the ones listed in the documentation page https://doc.rust-lang.org/std/borrow/enum.Cow.html

Actually, you can write std::borrow::Cow::Borrowed("hi") if it's borrowed, or std::borrow::Cow::Owned("hi".to_string()) if it's necessary to own the type, but we avoid allocations in case of a borrowed value

[nathanielsimard]

Good job, not sure if all those checks are important, but at least we have a way to test them easily.

[syl20bnr]

Ready for another round of review.

I parsed the strings returned by rustup in the end as @nathanielsimard proposed. I also added some tests and converted some strings to constants. Utils module is now a directory.

[nathanielsimard]

LGTM

[syl20bnr]

@Luni-4 Is that OK with you too ?

[Luni-4]

Fine for me too! Thanks a lot for your work!