name: Security Audit
on:
schedule:
- cron: '0 0 * * 1'
workflow_dispatch:
permissions:
contents: read
jobs:
audit:
name: Security Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Run security audit
uses: rustsec/audit-action@v1
with:
ignore: "RUSTSEC-2020-0168 RUSTSEC-2024-0014 RUSTSEC-2024-0370 RUSTSEC-2024-0384 RUSTSEC-2024-0388 RUSTSEC-2024-0436"
dependency-check:
name: Dependency Check
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Rust
uses: dtolnay/rust-toolchain@master
with:
toolchain: 1.82.0
- name: Install cargo-outdated
run: cargo install cargo-outdated
- name: Check for outdated dependencies
run: cargo outdated --exit-code 1 || echo "Some dependencies are outdated"
- name: Check for duplicate dependencies
run: cargo tree --duplicates