Add lint for CVE-2021-42574 and change CI cache mechanism (#271)

* Add lint for CVE-2021-42574 and change CI cache mechanism

* Use a matrix instead of a separate job

* Fix missing matrix key

Co-authored-by: Russell Cohen <russell.r.cohen@gmail.com>

Author: jdisanti

.github/workflows/ci.yaml

@@ -1,30 +1,25 @@
 on: [ pull_request ]
 
-env:
-  rust_version: 1.53.0
-
 name: CI
 
 jobs:
   test:
     runs-on: ubuntu-latest
     name: Compile & Test SDK
+    strategy:
+      matrix:
+        rust_version: [1.53.0, 1.56.1]
     steps:
       - uses: actions/checkout@v2
-      - uses: actions/cache@v2
-        name: Cargo Cache
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            sdk/target
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.toml') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
       - uses: actions-rs/toolchain@v1
         with:
-          toolchain: ${{ env.rust_version }}
+          toolchain: ${{ matrix.rust_version }}
           default: true
+      # Pinned to the commit hash of v1.3.0
+      - uses: Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641
+        with:
+          sharedKey: test
+          working-directory: sdk
       - name: Cargo Test
         run: cargo test
         env:

.github/workflows/tool-ci.yaml

@@ -3,7 +3,9 @@ on:
     paths: 'tools/**'
 
 env:
-  rust_version: 1.53.0
+  # The publisher tool can use the latest Rust since it isn't published.
+  # Build with a minimum of Rust 1.56.1 to check for CVE-2021-42574.
+  rust_version: 1.56.1
   rust_toolchain_components: clippy,rustfmt
 
 name: Tools CI
@@ -14,21 +16,16 @@ jobs:
     name: Compile, Test, and Lint the `tools/` path
     steps:
       - uses: actions/checkout@v2
-      - uses: actions/cache@v2
-        name: Cargo Cache
-        with:
-          path: |
-            ~/.cargo/registry
-            ~/.cargo/git
-            tools/publisher/target
-          key: tools-${{ runner.os }}-cargo-${{ hashFiles('tools/**/Cargo.toml') }}
-          restore-keys: |
-            tools-${{ runner.os }}-cargo-
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: ${{ env.rust_version }}
           components: ${{ env.rust_toolchain_components }}
           default: true
+      # Pinned to the commit hash of v1.3.0
+      - uses: Swatinem/rust-cache@842ef286fff290e445b90b4002cc9807c3669641
+        with:
+          sharedKey: tools-test
+          working-directory: tools/publisher
       - name: Format Check
         run: rustfmt --check --edition 2018 $(find tools -name '*.rs' -print | grep -v /target/)
       - name: Cargo Test