audit #283
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: audit | |
# This is a separate file so it can have a separate badge in readme | |
# and therefore spread awareness of cargo audit a tiny bit. | |
on: | |
push: | |
branches: [ master ] | |
pull_request: | |
branches: [ master ] | |
schedule: | |
# Runs at 15:00 UTC on Fri | |
- cron: "0 15 * * 5" | |
workflow_dispatch: | |
# This allows running it on any branch manually: | |
# https://docs.github.com/en/actions/managing-workflow-runs/manually-running-a-workflow | |
env: | |
CARGO_TERM_COLOR: always | |
jobs: | |
audit: | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v3 | |
# Actions-rs/install is unmaintained but works for now. | |
# Alternatives for when it breaks: | |
# - dtolnay/install - not a full replacement - only supports crates he uses (not audit currently) | |
# - baptiste0928/cargo-install - looks lke it just compiles the crate and then caches it for subsequent runs | |
# - just `cargo install` and caching it | |
- uses: actions-rs/install@v0.1 | |
with: | |
crate: cargo-audit | |
version: latest | |
- run: cargo audit --version | |
- run: cargo audit --deny warnings |