From 2a02d2ca2d836792ac964086f47e71a61f1b2f98 Mon Sep 17 00:00:00 2001 From: rustaceanrob Date: Thu, 3 Oct 2024 10:23:58 -1000 Subject: [PATCH] ci: add security audit --- .github/workflows/audit.yml | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 .github/workflows/audit.yml diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml new file mode 100644 index 0000000..7cf7e03 --- /dev/null +++ b/.github/workflows/audit.yml @@ -0,0 +1,22 @@ +name: Security Audit +on: + workflow_dispatch: + schedule: + - cron: "0 0 * * *" + +jobs: + audit: + permissions: + issues: write + checks: write + strategy: + matrix: + platform: [ubuntu-latest, macos-latest, windows-latest] + runs-on: ${{ matrix.platform }} + steps: + - name: Checkout source code + uses: actions/checkout@v3 + - name: Run security audit + uses: rustsec/audit-check@v1.4.1 + with: + token: ${{ secrets.GITHUB_TOKEN }}