Audit

chore(deps): Bump the backwards-compatible group across 1 directory with 17 updates #304

	name: Audit
	on:
	pull_request:
	schedule:
	- cron: '0 0 * * 0'
	push:
	branches:
	- 'main'


	# Cancel in progress CI run if new version is pushed
	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true


	jobs:
	dependencies:
	runs-on: ubuntu-latest
	permissions:
	checks: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Audit dependencies (crates)
	uses: rustsec/audit-check@v2.0.0
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	security:
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write
	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	- name: Run DevSkim scanner
	uses: microsoft/DevSkim-Action@v1

	- name: Upload result as build artifact
	uses: actions/upload-artifact@v4
	with:
	name: devskim-results
	path: devskim-results.sarif

	- name: Upload results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@v3
	with:
	sarif_file: devskim-results.sarif

	licenses:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: EmbarkStudios/cargo-deny-action@v2
	with:
	command: check licenses
	arguments: --all-features

Provide feedback