diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 743478d..e7dd757 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -2,7 +2,7 @@ name: security on: schedule: - - cron: '33 0 * * THU' + - cron: '0 0 * * *' push: paths: - '**/Cargo.toml' @@ -14,7 +14,27 @@ jobs: permissions: write-all name: "Audit Rust Dependencies" steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0 + - uses: actions/checkout@v7 + + - uses: dtolnay/rust-toolchain@stable + id: toolchain + + - name: Install cargo-audit + uses: taiki-e/install-action@v2 with: - token: ${{ secrets.GITHUB_TOKEN }} + tool: cargo-audit + + - name: Run security audit + run: cargo audit --color never + continue-on-error: true + + - name: Run security audit with JSON output + run: cargo audit --json > audit-results.json + continue-on-error: true + + - name: Upload audit results + uses: actions/upload-artifact@v7 + if: always() + with: + name: security-audit-results + path: audit-results.json