Skip to content

Commit 2968dbc

Browse files
f0rkiMichael Rodler
andauthored
chore(ci): run cargo-audit weekly to check for known vulnerabilities in dependencies. (#3246)
`cargo audit` checks for dependencies with known issues. This PR adds a github workflow that runs `cargo audit` on a weekly basis on `HEAD` and whenever a dependency changes. Signed-off-by: Michael Rodler <mrodler@amazon.de> Co-authored-by: Michael Rodler <mrodler@amazon.de> Co-authored-by: f0rki <m@mrodler.eu>
1 parent 793af1e commit 2968dbc

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

.github/workflows/cargo-audit.yml

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
name: cargo-audit
2+
on:
3+
push:
4+
paths:
5+
- '**/Cargo.toml'
6+
- '**/Cargo.lock'
7+
schedule:
8+
- cron: '0 16 * * Mon'
9+
10+
jobs:
11+
security_audit:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- uses: actions/checkout@v5
15+
- uses: rustsec/audit-check@v2
16+
with:
17+
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)