mirror of
https://github.com/tokio-rs/tokio.git
synced 2026-08-14 00:00:12 +02:00
Taiki EndoandGitHub
519afd4458
- Use dtolnay/rust-toolchain instead of actions-rs/toolchain - Use cargo/cross directly instead of actions-rs/cargo - Use rustsec/audit-check instead of actions-rs/audit-check
31 lines
733 B
YAML
31 lines
733 B
YAML
name: Security Audit
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
paths:
|
|
- '**/Cargo.toml'
|
|
schedule:
|
|
- cron: '0 2 * * *' # run at 2 AM UTC
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
security-audit:
|
|
permissions:
|
|
checks: write # for rustsec/audit-check to create check
|
|
contents: read # for actions/checkout to fetch code
|
|
issues: write # for rustsec/audit-check to create issues
|
|
runs-on: ubuntu-latest
|
|
if: "!contains(github.event.head_commit.message, 'ci skip')"
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Audit Check
|
|
# https://github.com/rustsec/audit-check/issues/2
|
|
uses: rustsec/audit-check@master
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|