Skip to content

Commit

Permalink
Introduce CI workflow running cargo audit
Browse files Browse the repository at this point in the history
In order to continuously monitor our dependencies for security
vulnerabilities, we introduce a new CI job that will use `cargo audit`
to check for any known vulnerabilities.

This job is run on a daily schedule. For each new advisory, a new issue
will be created.
  • Loading branch information
tnull committed Jan 30, 2024
1 parent 5153c6c commit 0840c81
Showing 1 changed file with 19 additions and 0 deletions.
19 changes: 19 additions & 0 deletions .github/workflows/audit.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
name: Security audit
on:
schedule:
- cron: '0 0 * * *'

jobs:
audit:
strategy:
matrix:
platform: [
ubuntu-latest,
macos-latest,
]
runs-on: ${{ matrix.platform }}
steps:
- uses: actions/checkout@v3
- uses: rustsec/[email protected]
with:
token: ${{ secrets.GITHUB_TOKEN }}

0 comments on commit 0840c81

Please sign in to comment.