diff --git a/.github/workflows/security_audit.yaml b/.github/workflows/security_audit.yaml index 513ba8b..cb68e5b 100644 --- a/.github/workflows/security_audit.yaml +++ b/.github/workflows/security_audit.yaml @@ -21,5 +21,10 @@ jobs: token: ${{ secrets.GITHUB_TOKEN }} - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0 + # Build against stable because cargo-audit sometimes depends on things + # that require a newer Rust version than our pinned toolchain. This does + # not influence the result, so it should be safe. + env: + RUSTUP_TOOLCHAIN: stable with: token: ${{ secrets.GITHUB_TOKEN }}