name: Security Audit
on:
push:
branches: [main]
pull_request:
schedule:
- cron: '0 0 * * *'
concurrency:
group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
cancel-in-progress: true
jobs:
audit:
name: Security Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - uses: tylerbutler/actions/install-tools@2189c2e4cd75378b6db8b68ba451bf74d0975c4a with:
tools: cargo-audit,cargo-deny
- name: Run cargo audit
run: cargo audit
- name: Run cargo deny (advisories)
run: cargo deny check advisories
continue-on-error: true - name: Run cargo deny (licenses, bans, sources)
run: cargo deny check licenses bans sources