name: Security Audit
on:
push:
branches:
pull_request:
branches:
paths:
- '**/Cargo.toml'
- 'Cargo.lock'
- '.github/workflows/security.yml'
schedule:
# Run weekly on Sunday at 00:00 UTC
- cron: '0 0 * * 0'
permissions:
contents: read
jobs:
audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
- name: Install cargo-audit
run: cargo install cargo-audit
- name: Run cargo audit
run: cargo audit || exit 1