security-audit #126

	# SPDX-FileCopyrightText: Copyright (c) 2017-2023 slowtec GmbH <[email protected]>
	# SPDX-License-Identifier: CC0-1.0

	# yaml-language-server: $schema=https://json.schemastore.org/github-workflow

	name: security-audit

	permissions:
	contents: read

	on:
	push:
	paths:
	- "**/Cargo.toml"
	schedule:
	# Weekly, i.e. on Sunday at 04:37 UTC
	- cron: "37 4 * * 0"
	workflow_dispatch:

	jobs:
	run:
	runs-on: ubuntu-latest

	steps:
	- uses: dtolnay/rust-toolchain@stable

	- name: Install cargo-audit
	run: cargo install cargo-audit

	- uses: actions/checkout@v3

	- name: Cache Rust toolchain and build artifacts
	uses: Swatinem/rust-cache@v2
	with:
	# The cache should not be shared between different workflows and jobs.
	shared-key: ${{ github.workflow }}-${{ github.job }}

	- name: Run security audit
	run: cargo audit --deny unsound --deny yanked

Provide feedback