Skip to content

Commit fd705c7

Browse files
committed
Introduce CI workflow running cargo audit
In order to continuously monitor our dependencies for security vulnerabilities, we introduce a new CI job that will use `cargo audit` to check for any known vulnerabilities. This job is run on a daily schedule. For each new advisory, a new issue will be created.
1 parent 7299fe6 commit fd705c7

File tree

2 files changed

+19
-1
lines changed

2 files changed

+19
-1
lines changed

.github/workflows/audit.yml

+17
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
name: Security Audit
2+
on:
3+
workflow_dispatch:
4+
schedule:
5+
- cron: '0 0 * * *'
6+
7+
jobs:
8+
audit:
9+
runs-on: ubuntu-latest
10+
permissions:
11+
issues: write
12+
checks: write
13+
steps:
14+
- uses: actions/checkout@v3
15+
- uses: rustsec/[email protected]
16+
with:
17+
token: ${{ secrets.GITHUB_TOKEN }}

README.md

+2-1
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,9 @@ Rust-Lightning
44
[![Crate](https://img.shields.io/crates/v/lightning.svg?logo=rust)](https://crates.io/crates/lightning)
55
[![Documentation](https://img.shields.io/static/v1?logo=read-the-docs&label=docs.rs&message=lightning&color=informational)](https://docs.rs/lightning/)
66
[![Safety Dance](https://img.shields.io/badge/unsafe-forbidden-success.svg)](https://github.com/rust-secure-code/safety-dance/)
7+
[![Security Audit](https://github.com/lightningdevkit/rust-lightning/actions/workflows/audit.yml/badge.svg)](https://github.com/lightningdevkit/rust-lightning/actions/workflows/audit.yml)
78

8-
[LDK](https://lightningdevkit.org)/`rust-lightning` is a highly performant and flexible
9+
[LDK](https://lightningdevkit.org)/`rust-lightning` is a highly performant and flexible
910
implementation of the Lightning Network protocol.
1011

1112
The primary crate, `lightning`, is runtime-agnostic. Data persistence, chain interactions,

0 commit comments

Comments
 (0)