name: Security Audit
on:
pull_request:
paths:
- "**/Cargo.toml"
- "Cargo.lock"
- "deny.toml"
- ".github/workflows/audit.yml"
push:
branches:
- main
paths:
- "**/Cargo.toml"
- "Cargo.lock"
- "deny.toml"
- ".github/workflows/audit.yml"
schedule:
- cron: "0 2 * * *"
workflow_dispatch:
concurrency:
group: audit-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
permissions:
contents: read
jobs:
cargo-deny:
name: cargo-deny
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 with:
persist-credentials: false
- uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe