What the developer wrote
Authored by Tobin C. Harding
CI: Remove WASM job
Because it breaks all the time ...
Note this job only runs for `hashes`.
What changed, and why it matters
This commit removes an automated WebAssembly (WASM) test job from the project's continuous integration (CI) pipeline. The job tested only the 'hashes' sub-crate. The stated reason is that the job 'breaks all the time.' There is no code change to the library itself, and nothing in the commit suggests a security issue.
No security action required. If maintaining WASM compatibility is important, consider fixing or replacing the flaky WASM test job rather than silently dropping it, but this is a project maintenance decision, not a security fix.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff deletes the ‘WASM - stable toolchain’ job from .github/workflows/rust.yml. This job ran ./contrib/wasm.sh inside the hashes directory on an Ubuntu 24.04 GitHub Actions runner. No source code, dependencies, build scripts, or cryptographic logic were modified. The change is purely a CI configuration reduction.
Changed components
.github/workflows/rust.ymlInspect captured patch +0 / −18
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 62af540a..1cf15ad0 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -188,24 +188,6 @@ jobs:
- name: "Run sanitizer script"
run: cd ./hashes && ./contrib/sanitizer.sh
- WASM: # hashes crate only.
- name: WASM - stable toolchain
- runs-on: ubuntu-24.04
- permissions:
- contents: read
- strategy:
- fail-fast: false
- # Note we do not use the recent lock file for wasm testing.
- steps:
- - name: "Checkout repo"
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
- with:
- persist-credentials: false
- - name: "Select toolchain"
- uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable
- - name: "Run wasm script"
- run: cd hashes && ./contrib/wasm.sh
-
Kani:
name: Kani codegen - stable toolchain
runs-on: ubuntu-24.04
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.