name: Audit
on:
push:
pull_request:
schedule:
- cron: "0 0 * * *" workflow_dispatch:
permissions: {}
env:
CARGO_TERM_COLOR: always
jobs:
cargo-audit:
name: Cargo Audit
runs-on: ubuntu-latest
permissions:
contents: read
issues: write
steps:
- name: Checkout Repository
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 with:
persist-credentials: false
- uses: actions-rust-lang/audit@72c09e02f132669d52284a3323acdb503cfc1a24 name: Audit Rust Dependencies
zizmor:
name: Zizmor
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 with:
persist-credentials: false
- name: Install uv
uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39
- name: Run Zizmor
run: uvx zizmor .