add rust dependency scan

Author: duncanista

.github/workflows/vulnerability-scan.yml

@@ -52,6 +52,18 @@ jobs:
           severity-cutoff: low
           output-format: table
 
+  rust-dependency-scan:
+    runs-on: ubuntu-22.04
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+
+      - name: Scan Rust dependencies with cargo-audit
+        uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          working-directory: bottlecap
+
   build-and-scan-images:
     runs-on: ubuntu-22.04
     strategy:
@@ -152,7 +164,7 @@ jobs:
           output-format: table
 
   retry:
-    needs: [trivy-scans, grype-scans, build-and-scan-images]
+    needs: [trivy-scans, grype-scans, rust-dependency-scan, build-and-scan-images]
     if: failure() && fromJSON(github.run_attempt) < 2
     runs-on: ubuntu-22.04
     permissions:
@@ -165,7 +177,7 @@ jobs:
         run: gh workflow run retry-workflow.yml -F run_id=${{ github.run_id }}
 
   notify:
-    needs: [trivy-scans, grype-scans, build-and-scan-images]
+    needs: [trivy-scans, grype-scans, rust-dependency-scan, build-and-scan-images]
     if: failure() && fromJSON(github.run_attempt) >= 2
     runs-on: ubuntu-22.04
     steps: