Files
rosenpass/.github/workflows/audit.yml
T
dependabot[bot]andGitHub 2dd81e17af chore(deps): bump actions/checkout from 6 to 7
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-18 23:12:57 +00:00

28 lines
621 B
YAML

# Audits the code regularly e.g. for bad dependencies and security advisories
# This Workflow is different from `qc.yml`:
# - runs regularly
# - does not work on the code itself but on its depdencies
name: Audit
on:
pull_request:
push:
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
- ".github/workflows/audit.yml"
# branches: [main]
schedule:
- cron: "0 3 * * *"
jobs:
cargo-deny:
runs-on: ubicloud-standard-2
steps:
- uses: actions/checkout@v7
- uses: EmbarkStudios/cargo-deny-action@v2
with:
command: check
arguments: --all-features