name: Security audit (weekly)
# The CI run uses Swatinem/rust-cache@v2. Just in case someone
# poisons the cache, we run the uncached audit-check here.
on:
schedule:
# Runs at 00:00 UTC every Monday
- cron: '0 0 * * 1'
jobs:
audit:
runs-on: ubuntu-latest
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Run security audit
uses: rustsec/audit-check@v2.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}