Skip to content

Commit c55415f

Browse files
committed
Introduce CI workflow running cargo audit
In order to continuously monitor our dependencies for security vulnerabilities, we introduce a new CI job that will use `cargo audit` to check for any known vulnerabilities. This job is run on a daily schedule. For each new advisory, a new issue will be created.
1 parent 51d9ee3 commit c55415f

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

.github/workflows/audit.yml

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
name: Security audit
2+
on:
3+
schedule:
4+
- cron: '0 0 * * *'
5+
jobs:
6+
security_audit:
7+
runs-on: [ubuntu-latest, macos-latest]
8+
steps:
9+
- uses: actions/checkout@v3
10+
- uses: rustsec/[email protected]
11+
with:
12+
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)