Update to modern rust audits (#234)

This commit is contained in:
Dustin J. Mitchell
2026-08-25 18:06:46 -04:00
committed by GitHub
parent dda146ff2f
commit 83ed137744

View File

@ -2,7 +2,7 @@ name: security
on:
schedule:
- cron: '33 0 * * THU'
- cron: '0 0 * * *'
push:
paths:
- '**/Cargo.toml'
@ -14,7 +14,27 @@ jobs:
permissions: write-all
name: "Audit Rust Dependencies"
steps:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
- uses: actions/checkout@v7
- uses: dtolnay/rust-toolchain@stable
id: toolchain
- name: Install cargo-audit
uses: taiki-e/install-action@v2
with:
token: ${{ secrets.GITHUB_TOKEN }}
tool: cargo-audit
- name: Run security audit
run: cargo audit --color never
continue-on-error: true
- name: Run security audit with JSON output
run: cargo audit --json > audit-results.json
continue-on-error: true
- name: Upload audit results
uses: actions/upload-artifact@v7
if: always()
with:
name: security-audit-results
path: audit-results.json