Security audit #2050

	name: Security audit

	on:
	push:
	branches:
	- 'main'
	pull_request:
	schedule:
	- cron: '0 0 * * *' # Run daily at midnight UTC

	permissions:
	issues: write
	checks: write

	jobs:
	security_audit:
	name: cargo audit
	runs-on: [self-hosted, infra]
	steps:
	- uses: actions/checkout@v7
	- uses: actions-rust-lang/setup-rust-toolchain@v1
	- name: Install cargo-audit with locked dependencies
	run: cargo install cargo-audit --version 0.22.2 --locked
	- uses: rustsec/audit-check@v2.0.0
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	cargo_deny_advisories:
	name: cargo deny advisories
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- uses: EmbarkStudios/cargo-deny-action@v2
	with:
	command: check advisories
	arguments: --all-features

Navigation Menu