nushell/.github/workflows/audit.yml
Justin Ma af98b0219d
Upgrade actions/checkout and softprops/action-gh-release (#12135)
<!--
if this PR closes one or more issues, you can automatically link the PR
with
them by using one of the [*linking
keywords*](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword),
e.g.
- this PR should close #xxxx
- fixes #xxxx

you can also mention related issues, PRs or discussions!
-->

# Description
1. Upgrade actions/checkout
2. Upgrade softprops/action-gh-release@v2.0.1 to fix Node16 warnings
here: https://github.com/nushell/nushell/actions/runs/8162649859
3. Display Archive contents for Windows release
2024-03-09 11:00:33 +08:00

25 lines
498 B
YAML

name: Security audit
on:
pull_request:
paths:
- '**/Cargo.toml'
- '**/Cargo.lock'
push:
branches:
- main
env:
RUST_BACKTRACE: 1
CARGO_TERM_COLOR: always
CLICOLOR: 1
jobs:
security_audit:
runs-on: ubuntu-latest
# Prevent sudden announcement of a new advisory from failing ci:
continue-on-error: true
steps:
- uses: actions/checkout@v4.1.1
- uses: rustsec/audit-check@v1.4.1
with:
token: ${{ secrets.GITHUB_TOKEN }}