name: Security
on:
push:
paths:
- Cargo.lock
- Cargo.toml
- .github/workflows/security.yml
pull_request:
paths:
- Cargo.lock
- Cargo.toml
- .github/workflows/security.yml
schedule:
- cron: "17 4 * * 1"
workflow_dispatch:
permissions:
contents: read
checks: write
issues: write
jobs:
audit:
name: RustSec advisory audit
runs-on: ubuntu-24.04
steps:
- uses: actions/checkout@v7
- uses: rustsec/audit-check@v2
with:
token: ${{ secrets.GITHUB_TOKEN }}