Update dependencies #182
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# yaml-language-server: $schema=https://json.schemastore.org/github-workflow | |
name: security-audit | |
permissions: | |
contents: read | |
on: | |
push: | |
paths: | |
- "**/Cargo.toml" | |
- "**/Cargo.lock" | |
workflow_dispatch: | |
#schedule: | |
# - cron: '0 0 * * *' | |
jobs: | |
security-audit: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
- name: Install Rust toolchain | |
uses: dsherret/rust-toolchain-file@v1 | |
- name: Install cargo-audit | |
run: | | |
cargo install cargo-audit | |
- name: Cache Rust toolchain and build artifacts | |
uses: Swatinem/rust-cache@v2 | |
with: | |
# Distinguished by the action name to avoid sharing across different actions! | |
shared-key: "security-audit" | |
- name: Run security audit | |
run: | | |
cargo audit --deny unsound --deny yanked |