Skip to content

Commit 8ac7efe

Browse files
committed
Introduce CI workflow running cargo audit
In order to continuously monitor our dependencies for security vulnerabilities, we introduce a new CI job that will use `cargo audit` to check for any known vulnerabilities. This job is run on a daily schedule. For each new advisory, a new issue will be created.
1 parent 51d9ee3 commit 8ac7efe

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

.github/workflows/audit.yml

+18
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
name: Security audit
2+
on:
3+
schedule:
4+
- cron: '0 0 * * *'
5+
jobs:
6+
audit:
7+
strategy:
8+
matrix:
9+
platform: [
10+
ubuntu-latest,
11+
macos-latest,
12+
]
13+
runs-on: ${{ matrix.platform }}
14+
steps:
15+
- uses: actions/checkout@v3
16+
- uses: rustsec/[email protected]
17+
with:
18+
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)