diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml new file mode 100644 index 0000000..dd5eae1 --- /dev/null +++ b/.github/workflows/audit.yml @@ -0,0 +1,13 @@ +name: Security audit +on: + schedule: + # Run at 06:00 UTC every morning + - cron: '0 6 * * *' +jobs: + audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v1 + - uses: actions-rs/audit-check@v1 + with: + token: ${{ secrets.GITHUB_TOKEN }} \ No newline at end of file diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 90bfd18..600d3f7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -38,25 +38,13 @@ jobs: with: token: ${{ secrets.GITHUB_TOKEN }} - audit: + security_audit: runs-on: ubuntu-latest steps: - uses: actions/checkout@v2 - - - uses: actions-rs/toolchain@v1 - with: - profile: minimal - toolchain: stable - default: true - - name: Install cargo-audit - uses: actions-rs/install@v0.1.2 + - uses: actions-rs/audit-check@v1 with: - crate: cargo-audit - version: latest - use-tool-cache: true - - name: Audit - run: cargo audit --deny warnings - + token: ${{ secrets.GITHUB_TOKEN }} build-and-test: strategy: