rtic/.github/workflows/audit.yaml
Christopher Evans fbefb66b9e ci: Audit-check: create Cargo.lock before audit-check
Allow on demand action checks

use latest actions/checkout

---

https://github.com/rtic-rs/rtic/pull/1080 switched
to using rustsec/audit-check but didn't setup the
Cargo.lock file. This action has been failing for
three months.

https://github.com/rtic-rs/rtic/actions/workflows/audit.yaml

---

https://github.com/rustsec/audit-check/pull/39
describes how a missing Cargo.lock will be missing
in library crates.
2025-09-17 18:58:58 +00:00

14 lines
335 B
YAML

name: Security audit
on:
schedule:
- cron: '0 0 * * *'
workflow_dispatch:
jobs:
security_audit:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- run: cargo generate-lockfile # create Cargo.lock
- uses: rustsec/audit-check@v2.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}