Security Audit #420

	name: Security Audit

	on:
	push:
	branches: [ main ]
	paths:
	- '**/Cargo.toml'
	- '**/Cargo.lock'
	- '.github/workflows/security.yml'
	pull_request:
	paths:
	- '**/Cargo.toml'
	- '**/Cargo.lock'
	- '.github/workflows/security.yml'
	schedule:
	- cron: '0 0 * * *' # Daily at midnight UTC

	env:
	CARGO_TERM_COLOR: always

	# Cancel previous runs
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	security-audit:
	name: Security Audit
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Install Rust
	uses: dtolnay/rust-toolchain@7b1c307e0dcbda6122208f10795a713336a9b35a # stable
	with:
	toolchain: 1.89

	- name: Cache cargo registry
	uses: Swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab # v2.7.5
	with:
	cache-on-failure: true

	- name: Install cargo-audit
	uses: taiki-e/install-action@v2
	with:
	tool: [email protected]

	- name: Run security audit
	run: cargo audit --deny warnings

Provide feedback