ci/verbs/Cargo.toml
[package]
name = "ci-verbs"
version = "0.0.0"
edition = "2021"
license = "MIT OR Apache-2.0"
publish = false
description = "The CI runner's own verbs: the constellation lock check, the status page, the nightly Scorecard and the OpenSSF badge copy."
# DETACHED on purpose (its own workspace and lock): the runner's lock check and status
# page must build when dwarves' own graph does not. From 13:11Z on 2026-10-24 nornir
# asked for modgunn 0.0.7 while modgunn's main stood at 0.0.8, dwarves' workspace stopped
# resolving, and with it `cargo xtask ci status`: STATUS.md froze for ten hours while the
# cron ran on. This crate links only nornir-xtask-support (std + nornir-git), and the
# crates.io leaf serde_json for the nightly Scorecard step (`ci-verbs scorecard`), and
# ureq for the nightly OpenSSF badge copy (`ci-verbs openssf-badge`, BADGE-7).
[workspace]
[dependencies]
nornir-xtask-support = { version = "0.1.3", path = "../../../edda/crates/nornir-xtask-support" }
# the nightly Scorecard step reads Scorecard's JSON answer
serde_json = "1"
# the nightly OpenSSF badge step fetches the badge (BADGE-7); dwarves-slsa's client
ureq = { version = "3", default-features = false, features = ["rustls"] }