Skip to content

Commit d449e4c

Browse files
committed
Include 'cargo audit' GH action
Include Github action to execute the Cargo Audit tool to try finding existing CVEs in dependencies Signed-off-by: Sergio Arroutbi <sarroutb@redhat.com>
1 parent abb618a commit d449e4c

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

.github/workflows/audit.yaml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
# SPDX-FileCopyrightText: Sergio Arroutbi Braojos <sarroutb@redhat.com>
2+
#
3+
# SPDX-License-Identifier: CC0-1.0
4+
---
5+
name: Security audit
6+
"on":
7+
workflow_dispatch:
8+
paths:
9+
- '**/Cargo.toml'
10+
- '**/Cargo.lock'
11+
push:
12+
branches: ["main"]
13+
paths:
14+
- '**/Cargo.toml'
15+
- '**/Cargo.lock'
16+
pull_request:
17+
paths:
18+
- '**/Cargo.toml'
19+
- '**/Cargo.lock'
20+
21+
jobs:
22+
security_audit:
23+
runs-on: ubuntu-latest
24+
steps:
25+
- uses: actions/checkout@v6
26+
- uses: actions-rs/audit-check@v1
27+
with:
28+
token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)