mirror of
https://github.com/GothenburgBitFactory/taskchampion-sync-server.git
synced 2026-08-22 14:53:45 +00:00
Update to modern rust audits (#234)
This commit is contained in:
committed by
GitHub
parent
dda146ff2f
commit
83ed137744
28
.github/workflows/security.yml
vendored
28
.github/workflows/security.yml
vendored
@ -2,7 +2,7 @@ name: security
|
|||||||
|
|
||||||
on:
|
on:
|
||||||
schedule:
|
schedule:
|
||||||
- cron: '33 0 * * THU'
|
- cron: '0 0 * * *'
|
||||||
push:
|
push:
|
||||||
paths:
|
paths:
|
||||||
- '**/Cargo.toml'
|
- '**/Cargo.toml'
|
||||||
@ -14,7 +14,27 @@ jobs:
|
|||||||
permissions: write-all
|
permissions: write-all
|
||||||
name: "Audit Rust Dependencies"
|
name: "Audit Rust Dependencies"
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
- uses: actions/checkout@v7
|
||||||
- uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
|
|
||||||
|
- uses: dtolnay/rust-toolchain@stable
|
||||||
|
id: toolchain
|
||||||
|
|
||||||
|
- name: Install cargo-audit
|
||||||
|
uses: taiki-e/install-action@v2
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.GITHUB_TOKEN }}
|
tool: cargo-audit
|
||||||
|
|
||||||
|
- name: Run security audit
|
||||||
|
run: cargo audit --color never
|
||||||
|
continue-on-error: true
|
||||||
|
|
||||||
|
- name: Run security audit with JSON output
|
||||||
|
run: cargo audit --json > audit-results.json
|
||||||
|
continue-on-error: true
|
||||||
|
|
||||||
|
- name: Upload audit results
|
||||||
|
uses: actions/upload-artifact@v7
|
||||||
|
if: always()
|
||||||
|
with:
|
||||||
|
name: security-audit-results
|
||||||
|
path: audit-results.json
|
||||||
|
|||||||
Reference in New Issue
Block a user