name: Security Audit
on: [push, pull_request]
env:
CARGO_TERM_COLOR: always
permissions: {}
jobs:
supply-chain:
name: 'cargo-audit'
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd with:
persist-credentials: false
- name: Install Rust toolchain
run: rustup toolchain install stable --no-self-update
- uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 with:
cache-on-failure: true
- name: Install cargo-audit
run: cargo install cargo-audit@0.22.0 --force --locked
- name: Check for audit warnings
run: cargo audit -D warnings
continue-on-error: true
- name: Check for vulnerabilities
run: cargo audit