Merge pull request #83 from pragma-org/jeluard/security #16
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Security audit | |
| on: | |
| push: | |
| paths: | |
| - '**/Cargo.toml' | |
| - '**/Cargo.lock' | |
| - "crates/**/Cargo.toml" | |
| - "crates/**/Cargo.lock" | |
| jobs: | |
| security_audit: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Check unused dependencies | |
| run: | | |
| cargo install cargo-machete | |
| cargo machete | |
| - name: Check licenses | |
| run: | | |
| cargo install --locked cargo-deny | |
| cargo deny check licenses | |
| - uses: rustsec/audit-check@v2 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} |