28 lines
781 B
YAML
28 lines
781 B
YAML
name: Dependency security audit
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
schedule:
|
|
- cron: "17 4 * * 1"
|
|
|
|
jobs:
|
|
rustsec:
|
|
runs-on: linux-arm64
|
|
steps:
|
|
- name: Check out the repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Rust and the reviewed cargo-audit release
|
|
uses: https://github.com/taiki-e/install-action@9534c84618278caac52cb373bb164ed464dbd8af # v2
|
|
with:
|
|
tool: rust@1.92.0,cargo-audit@0.22.2
|
|
fallback: none
|
|
|
|
- name: Reject new RustSec vulnerabilities
|
|
# RustSec's registry checks require Cargo even with a prebuilt audit binary.
|
|
# The existing RSA exception is documented in docs/ssh-transport-audit.md.
|
|
run: cargo-audit audit --ignore RUSTSEC-2023-0071
|