audit.yaml

name: Security audit
on:
  pull_request:
    paths:
      - 'Cargo.toml'
      - '**/Cargo.toml'
      - 'Cargo.lock'
  push:
    branches:
    - master
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:
permissions: read-all

jobs:
  security_audit:
    name: Rustsec Audit
    runs-on: ubuntu-latest
    permissions:
      # Allow the action to post about found problems
      issues: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
        with:
          persist-credentials: false
      - uses: actions-rust-lang/audit@72c09e02f132669d52284a3323acdb503cfc1a24 # v1