name: Dependency Security
on:
pull_request:
push:
branches:
- main
schedule:
- cron: "17 6 * * 1"
workflow_dispatch:
jobs:
cargo-audit:
name: cargo audit
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Install Rust toolchain
uses: dtolnay/rust-toolchain@stable
- name: Cache cargo-audit
uses: Swatinem/rust-cache@v2
with:
cache-directories: ~/.cargo/bin
- name: Install cargo-audit
run: cargo install cargo-audit --locked
- name: Check RustSec advisories
run: cargo audit --deny warnings