name: Security audit
on:
push:
branches: [ "main" ]
paths: [ "Cargo.lock", "fuzz/Cargo.lock", ".github/workflows/audit.yml" ]
pull_request:
branches: [ "main" ]
paths: [ "Cargo.lock", "fuzz/Cargo.lock", ".github/workflows/audit.yml" ]
schedule:
- cron: '0 4 * * 1'
workflow_dispatch:
permissions:
contents: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v7
- name: Install cargo-audit
uses: taiki-e/install-action@v2
with:
tool: cargo-audit
- name: Audit dependencies
run: |
cargo audit
cargo audit --file fuzz/Cargo.lock