name: Security
on:
push:
branches: ["main"]
pull_request:
branches: ["main"]
schedule:
- cron: "17 4 * * 1"
permissions:
contents: read
jobs:
cargo-audit:
name: cargo audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: dtolnay/rust-toolchain@stable
- run: cargo install cargo-audit --locked
- run: cargo audit
pip-audit:
name: pip-audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- uses: actions/setup-python@v6
with:
python-version: "3.11"
- run: pip install pip-audit
- name: Run pip-audit
working-directory: py
run: pip-audit