name: Security audit
on:
push:
branches:
- main
tags:
- "**"
pull_request:
schedule:
- cron: "0 12 * * 1"
jobs:
security_audit:
if: github.event_name != 'schedule'
runs-on: ubuntu-latest
permissions:
contents: read
checks: write
steps:
- uses: amqp-rs/actions/checkout@main
- uses: amqp-rs/actions/security@main
scheduled_audit:
if: github.event_name == 'schedule'
runs-on: ubuntu-latest
permissions:
contents: read
checks: write
issues: write
steps:
- uses: amqp-rs/actions/checkout@main
- uses: amqp-rs/actions/security@main