Skip to content

All new crates have been added to the workspace Cargo.toml, and compr… #4

All new crates have been added to the workspace Cargo.toml, and compr…

All new crates have been added to the workspace Cargo.toml, and compr… #4

Workflow file for this run

name: Security Scanning
on:
schedule:
- cron: '0 0 * * 0' # Weekly on Sunday
push:
branches: [ main, develop ]
pull_request:
branches: [ main, develop ]
workflow_dispatch:
jobs:
audit:
name: Cargo Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
- name: Run cargo audit
run: |
cargo install cargo-audit --version 0.18.0
cargo audit
deny:
name: Cargo Deny
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install cargo-deny
run: |
curl -sSL https://github.com/EmbarkStudios/cargo-deny/releases/download/0.14.3/cargo-deny-0.14.3-x86_64-unknown-linux-musl.tar.gz | tar -xz
sudo mv cargo-deny-0.14.3-x86_64-unknown-linux-musl/cargo-deny /usr/local/bin/
- name: Run cargo deny check
run: cargo deny check
clippy-security:
name: Clippy Security Lints
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- name: Install Rust
uses: dtolnay/rust-toolchain@stable
with:
components: clippy
- name: Run clippy with security lints
run: cargo clippy --workspace -- -D clippy::security -D warnings
dependency-review:
name: Dependency Review
runs-on: ubuntu-latest
if: github.event_name == 'pull_request'
steps:
- uses: actions/checkout@v4
- uses: actions/dependency-review-action@v4
with:
fail-on-severity: high