Security Audit #767
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Security Audit | |
| on: | |
| pull_request: | |
| branches: | |
| - main | |
| paths: | |
| - "**/Cargo.toml" | |
| - "**/Cargo.lock" | |
| - ".github/workflows/security-audit.yaml" | |
| schedule: | |
| - cron: "0 0 * * *" # once a day at midnight UTC | |
| # NB: that cron trigger on GH actions runs only on the default branch | |
| jobs: | |
| security_audit_rust: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository and submodules | |
| uses: actions/checkout@v3 | |
| with: | |
| submodules: recursive | |
| - name: Install Rust toolchain | |
| uses: ./.github/actions/install-rust-toolchain | |
| # Ignored advisories: | |
| # - https://rustsec.org/advisories/RUSTSEC-2024-0320 : yaml-rust is unmaintained | |
| # - This is a dependency of the config crate, which does not have a version without yaml-rust. | |
| # See https://github.com/mehcode/config-rs/issues/473 and https://github.com/eclipse-ibeji/freyja/issues/168 | |
| - name: Cargo audit | |
| uses: actions-rs/cargo@v1 | |
| with: | |
| command: audit | |
| args: --deny warnings --ignore RUSTSEC-2024-0320 |