name: Cargo Audit & Supply Chain Security
on:
schedule:
- cron: '0 0 * * 0' # Weekly scan
push:
branches:
pull_request:
branches:
jobs:
security_audit:
name: Dependency Vulnerability Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: dtolnay/rust-toolchain@stable
- name: Install cargo-audit
uses: taiki-e/install-action@cargo-audit
- name: Run Cargo Audit
run: cargo audit