mirror of
https://github.com/ClementTsang/bottom.git
synced 2026-08-16 08:26:50 +00:00
Clement Tsang
0c648ed14a
action-rs' action seems to not be really maintained anymore and throws some redundant warnings that kinda clog up outputs. As such, I feel like moving to a more active action is probably worth it.
30 lines
917 B
YAML
30 lines
917 B
YAML
# A routine check to see if there are any Rust-specific security vulnerabilities in the repo we should be aware of.
|
|
|
|
name: audit
|
|
on:
|
|
workflow_dispatch:
|
|
schedule:
|
|
- cron: "0 0 * * 1"
|
|
jobs:
|
|
audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Enable Rust cache
|
|
uses: Swatinem/rust-cache@cb2cf0cc7c5198d3364b9630e2c3d457f160790c # 1.4.0
|
|
|
|
- name: Set up Rust toolchain
|
|
uses: dtolnay/rust-toolchain@88e7c2e1da2693cf72d58fce9416206818e61dea # https://github.com/dtolnay/rust-toolchain/commit/88e7c2e1da2693cf72d58fce9416206818e61dea
|
|
with:
|
|
toolchain: stable
|
|
|
|
- name: Install cargo-audit
|
|
run: |
|
|
cargo install cargo-audit --locked
|
|
|
|
- uses: actions-rs/audit-check@35b7b53b1e25b55642157ac01b4adceb5b9ebef3 # 1.2.0
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|