name: Security Audit (advisories, sources)
permissions:
contents: read
on:
push:
paths:
- "**/Cargo.toml"
schedule:
- cron: "0 0 * * *"
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
jobs:
cargo-deny:
name: EmbarkStudios/cargo-deny
runs-on: ubuntu-latest
strategy:
matrix:
checks:
- advisories
- bans sources
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 with:
persist-credentials: false
- uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 with:
command: check ${{ matrix.checks }}