name: Security Audit
on:
schedule:
- cron: '0 0 * * 0' push:
paths:
- '**/Cargo.toml'
- '**/Cargo.lock'
workflow_dispatch:
jobs:
security_audit:
name: Security Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Update to latest Rust
run: rustup update
- name: Install cargo-audit
run: cargo install cargo-audit
- name: Run cargo audit
run: cargo audit
continue-on-error: true
dependencies:
name: Analyze Dependencies
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Update to latest Rust
run: rustup update
- name: Install cargo-outdated
run: cargo install cargo-outdated
- name: Check for outdated dependencies
run: cargo outdated --exit-code 1 --root-deps-only