mirror of
https://github.com/jmcorgan/fips.git
synced 2026-10-30 07:37:36 +00:00
Cargo fingerprints a workspace crate relative to the workspace root and judges it by file modification times, so a CARGO_TARGET_DIR shared by two checkouts can hand one checkout the other's binaries without compiling anything. testing/scripts/build.sh honours an exported CARGO_TARGET_DIR, and now warns when it resolves outside the checkout. A per-checkout directory outside the tree is legitimate and cannot be told apart from a shared one, so this warns rather than refuses.