Skip to content

chore(deps): update step-security/harden-runner action to v2.10.3 #3002

chore(deps): update step-security/harden-runner action to v2.10.3

chore(deps): update step-security/harden-runner action to v2.10.3 #3002

Workflow file for this run

name: Security audit
permissions:
contents: read
on:
schedule:
- cron: '0 0 * * *'
push:
paths:
- '.github/workflows/audit.yml'
- '**/Cargo.toml'
- '**/Cargo.lock'
pull_request:
paths:
- '.github/workflows/audit.yml'
- '**/Cargo.toml'
- '**/Cargo.lock'
env:
RUST_BACKTRACE: 1
CARGO_TERM_COLOR: always
CLICOLOR: 1
jobs:
cargo-deny:
runs-on: ubuntu-latest
strategy:
matrix:
checks:
- advisories
- bans licenses sources
# Prevent sudden announcement of a new advisory from failing ci:
continue-on-error: ${{ matrix.checks == 'advisories' }}
steps:
- name: Harden Runner
uses: step-security/harden-runner@c95a14d0e5bab51a9f56296a4eb0e416910cd350 # v2.10.3
with:
egress-policy: audit
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: EmbarkStudios/cargo-deny-action@e2f4ede4a4e60ea15ff31bc0647485d80c66cfba # v2.0.4
with:
command: check ${{ matrix.checks }}
rust-version: stable