name: Security audit
on:
pull_request:
workflow_dispatch:
push:
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
- ".github/workflows/audit.yml"
schedule:
- cron: "0 0 * * *"
jobs:
security_audit:
name: Audit check
runs-on: ubuntu-24.04
permissions:
checks: write
contents: read
issues: write
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
- uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998
with:
token: ${{ secrets.GITHUB_TOKEN }}
config: .cargo/audit.toml