name: Security audit
on:
push:
branches: [main]
paths:
- "Cargo.toml"
- "Cargo.lock"
- ".github/workflows/audit.yml"
pull_request:
branches: [main]
paths:
- "Cargo.toml"
- "Cargo.lock"
- ".github/workflows/audit.yml"
schedule:
- cron: "0 9 * * 1" workflow_dispatch:
permissions:
contents: read
env:
CARGO_TERM_COLOR: always
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
jobs:
audit:
name: cargo-audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 with:
toolchain: stable
- uses: taiki-e/install-action@711e1c3275189d76dcc4d34ddea63bf96ac49090 with:
tool: cargo-audit
- run: cargo audit --deny warnings