name: Security audit
on:
push:
branches: [master, develop]
paths:
- Cargo.toml
- Cargo.lock
- .github/workflows/audit.yml
- deny.toml
pull_request:
branches: [master, develop]
paths:
- Cargo.toml
- Cargo.lock
- .github/workflows/audit.yml
- deny.toml
schedule:
- cron: "0 3 * * 1"
workflow_dispatch:
permissions:
contents: read
jobs:
cargo-deny:
name: cargo-deny
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: EmbarkStudios/cargo-deny-action@v2
with:
command: check advisories bans sources