cribra 0.2.0

Privacy-first Rust core for detecting, querying, and safely transforming secrets and sensitive data
Documentation
name: Security

on:
  push:
    branches: [main]
    paths:
      - "Cargo.toml"
      - "Cargo.lock"
      - ".github/workflows/security.yml"
  pull_request:
    paths:
      - "Cargo.toml"
      - "Cargo.lock"
      - ".github/workflows/security.yml"
  schedule:
    - cron: "17 5 * * 1"
  workflow_dispatch:

permissions:
  contents: read
  checks: write
  issues: write

concurrency:
  group: security-${{ github.ref }}
  cancel-in-progress: false

jobs:
  audit:
    name: RustSec cargo audit
    runs-on: ubuntu-latest

    steps:
      - name: Checkout
        uses: actions/checkout@v7

      - name: Audit dependencies
        uses: rustsec/audit-check@v2.0.0
        with:
          token: ${{ secrets.GITHUB_TOKEN }}