From 504728ed75e4613df6d4754ec39c78fb1625b720 Mon Sep 17 00:00:00 2001
From: David Cook <dcook@divviup.org>
Date: Tue, 23 Jan 2024 12:53:54 -0600
Subject: [PATCH] Don't block CI upon announcement of new advisories

---
 .github/workflows/ci-build.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 5dc9504b1..e6203e2f2 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -135,6 +135,8 @@ jobs:
       run: cargo doc --profile ci --workspace
     - name: cargo-deny
       uses: EmbarkStudios/cargo-deny-action@v1
+      with:
+        command: check bans
 
   janus_docker:
     runs-on: ubuntu-latest
@@ -179,3 +181,13 @@ jobs:
         files: docker-bake.hcl
         workdir: .
         targets: interop_binaries_small
+
+  rustsec_advisories:
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+    - uses: actions/checkout@v4
+    - name: cargo-deny
+      uses: EmbarkStudios/cargo-deny-action@v1
+      with:
+        command: check advisories