name: Security audit
on:
schedule:
- cron: "0 0 * * *"
push:
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
pull_request:
permissions:
contents: read
issues: write
jobs:
audit:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v7
- name: Cache advisory database
uses: actions/cache@v6
with:
path: ~/.cargo/advisory-db
key: advisory-db-${{ hashFiles('**/Cargo.lock') }}
restore-keys: advisory-db-
- name: Install cargo-audit
uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad with:
tool: cargo-audit
- name: Run security audit
run: cargo audit