name: audit
on:
push:
branches: [ "main" ]
pull_request:
branches: [ "main" ]
schedule:
- cron: "0 3 * * *"
env:
CARGO_TERM_COLOR: always
jobs:
audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- name: Install cargo-audit
run: cargo install cargo-audit
- name: Check dependencies against the RustSec advisory database
run: cargo audit
licenses:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- name: Check dependency licenses against the allowlist
uses: EmbarkStudios/cargo-deny-action@v2
with:
arguments: --all-features --config .cargo/deny.toml
command: check licenses