name: Security
on:
push:
branches: [main]
paths:
- "Cargo.toml"
- "Cargo.lock"
- ".github/workflows/security.yml"
pull_request:
paths:
- "Cargo.toml"
- "Cargo.lock"
- ".github/workflows/security.yml"
schedule:
- cron: "17 5 * * 1"
workflow_dispatch:
permissions:
contents: read
checks: write
issues: write
concurrency:
group: security-${{ github.ref }}
cancel-in-progress: false
jobs:
audit:
name: RustSec cargo audit
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v7
- name: Audit dependencies
uses: rustsec/audit-check@v2.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}