2021-10-18 01:54:06 +00:00
|
|
|
# A routine check to see if there are any Rust-specific security vulnerabilities in the repo we should be aware of.
|
|
|
|
|
|
2020-11-26 08:28:56 +00:00
|
|
|
name: audit
|
2020-11-01 00:40:50 +00:00
|
|
|
on:
|
2021-10-18 01:32:08 +00:00
|
|
|
workflow_dispatch:
|
2020-11-01 00:40:50 +00:00
|
|
|
schedule:
|
2021-08-30 21:07:48 +00:00
|
|
|
- cron: "0 0 * * 1"
|
2020-11-01 00:40:50 +00:00
|
|
|
jobs:
|
|
|
|
|
audit:
|
|
|
|
|
runs-on: ubuntu-latest
|
|
|
|
|
steps:
|
2022-06-02 19:05:43 +00:00
|
|
|
- uses: actions/checkout@v3
|
2022-02-28 00:52:09 +00:00
|
|
|
|
2022-05-01 19:47:30 +00:00
|
|
|
- uses: Swatinem/rust-cache@cb2cf0cc7c5198d3364b9630e2c3d457f160790c # 1.4.0
|
2022-02-28 00:52:09 +00:00
|
|
|
|
|
|
|
|
- name: Install toolchain
|
|
|
|
|
uses: actions-rs/toolchain@88dc2356392166efad76775c878094f4e83ff746 # https://github.com/actions-rs/toolchain/commit/88dc2356392166efad76775c878094f4e83ff746
|
2020-11-01 00:40:50 +00:00
|
|
|
with:
|
2022-02-28 00:52:09 +00:00
|
|
|
profile: minimal
|
|
|
|
|
toolchain: stable
|
|
|
|
|
override: true
|
|
|
|
|
target: ${{ matrix.triple.target }}
|
|
|
|
|
|
|
|
|
|
- name: Install cargo-audit
|
|
|
|
|
run: |
|
|
|
|
|
cargo install cargo-audit --locked
|
|
|
|
|
|
2021-12-22 22:29:50 +00:00
|
|
|
- uses: actions-rs/audit-check@35b7b53b1e25b55642157ac01b4adceb5b9ebef3 # 1.2.0
|
2020-11-01 00:40:50 +00:00
|
|
|
with:
|
|
|
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
