Skip to content

Commit 5aabad8

Browse files
committed
Introduce CI workflow running cargo audit
In order to continuously monitor our dependencies for security vulnerabilities, we introduce a new CI job that will use `cargo audit` to check for any known vulnerabilities. This job is run on a daily schedule. For each new advisory, a new issue will be created.
1 parent 51d9ee3 commit 5aabad8

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

.github/workflows/audit.yml

+19
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
name: Security audit
2+
on:
3+
schedule:
4+
- cron: '0 0 * * *'
5+
6+
jobs:
7+
audit:
8+
strategy:
9+
matrix:
10+
platform: [
11+
ubuntu-latest,
12+
macos-latest,
13+
]
14+
runs-on: ${{ matrix.platform }}
15+
steps:
16+
- uses: actions/checkout@v3
17+
- uses: rustsec/[email protected]
18+
with:
19+
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)