name: Security
on:
push:
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
schedule:
- cron: "0 0 * * *"
jobs:
audit:
name: Audit Dependencies
runs-on: ubuntu-latest
continue-on-error: true
permissions:
contents: read
issues: write
steps:
- uses: actions/checkout@v6
- uses: actions-rust-lang/audit@v1
with:
# RUSTSEC-2023-0071: rsa timing sidechannel — no fix available,
# transitive dep via sqlx-mysql. Tracked upstream.
ignore: RUSTSEC-2023-0071