Security audit #400

	name: Security audit
	on:
	schedule:
	- cron: '0 0 * * *'
	push:
	branches: [main, develop]
	paths:
	- '**/Cargo.toml'
	- '**/Cargo.lock'

	pull_request:
	workflow_call:


	jobs:
	cargo-audit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v6
	- uses: actions-rs/audit-check@v1
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	cargo-vet:
	runs-on: ubuntu-latest
	env:
	CARGO_VET_VERSION: 0.10.1
	steps:
	- uses: actions/checkout@master
	- name: Install Rust
	run: rustup update stable && rustup default stable
	- uses: actions/cache@v5
	with:
	path: ${{ runner.tool_cache }}/cargo-vet
	key: cargo-vet-bin-${{ env.CARGO_VET_VERSION }}
	- name: Add the tool cache directory to the search path
	run: echo "${{ runner.tool_cache }}/cargo-vet/bin" >> $GITHUB_PATH
	- name: Ensure that the tool cache is populated with the cargo-vet binary
	run: cargo install --root ${{ runner.tool_cache }}/cargo-vet --version ${{ env.CARGO_VET_VERSION }} cargo-vet
	- name: Generate Lockfile
	run: cargo generate-lockfile
	- name: Invoke cargo-vet
	run: cargo vet --locked

	cargo-deny:
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v6
	- uses: EmbarkStudios/cargo-deny-action@v2

Navigation Menu