mirror of
https://github.com/rtic-rs/rtic.git
synced 2025-12-16 21:05:35 +01:00
Allow on demand action checks use latest actions/checkout --- https://github.com/rtic-rs/rtic/pull/1080 switched to using rustsec/audit-check but didn't setup the Cargo.lock file. This action has been failing for three months. https://github.com/rtic-rs/rtic/actions/workflows/audit.yaml --- https://github.com/rustsec/audit-check/pull/39 describes how a missing Cargo.lock will be missing in library crates.
14 lines
335 B
YAML
14 lines
335 B
YAML
name: Security audit
|
|
on:
|
|
schedule:
|
|
- cron: '0 0 * * *'
|
|
workflow_dispatch:
|
|
jobs:
|
|
security_audit:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
- run: cargo generate-lockfile # create Cargo.lock
|
|
- uses: rustsec/audit-check@v2.0.0
|
|
with:
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|