Update crates and GHA #45

New Issue

MrUnknownDE · 2026-04-05T20:29:03+02:00

MrUnknownDE commented

2026-04-05 20:29:03 +02:00

Originally created by @BlackDex on 3/21/2026

Updated all crates which are possible.

Updated all GitHub Actions to their latest version. There was a supply-chain attack on the trivy action to which we were not exposed since we were using pinned sha hashes. The latest version v0.35.0 is not vulnerable and that version will be used with this commit.

Also removed dtolnay/rust-toolchain as suggested by zizmor and adjusted the way to install the correct toolchain. Since this GitHub Action did not used any version tagging, it was also cumbersome to update.

*Originally created by @BlackDex on 3/21/2026* Updated all crates which are possible. Updated all GitHub Actions to their latest version. There was a supply-chain attack on the trivy action to which we were not exposed since we were using pinned sha hashes. The latest version v0.35.0 is not vulnerable and that version will be used with this commit. Also removed `dtolnay/rust-toolchain` as suggested by zizmor and adjusted the way to install the correct toolchain. Since this GitHub Action did not used any version tagging, it was also cumbersome to update.

MrUnknownDE closed this issue

2026-04-05 20:29:04 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#45