Create audit.yml

.github/workflows/audit.yml

@@ -0,0 +1,17 @@
+name: Security audit
+on:
+  pull_request:
+    # complemented with branch protection on main this will 
+    # need to complete successfully before we auto deploy from main
+    branches: main
+    paths: 
+      - '**/Cargo.toml'
+      - '**/Cargo.lock'
+jobs:
+  security_audit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: rustsec/[email protected]
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}