Bump ubuntu from `8a37d68` to `dfc1087` #467

	name: cargo-deny
	on:
	push:
	paths-ignore:
	- "**.md"
	pull_request:
	paths-ignore:
	- "**.md"
	schedule:
	- cron: '0 0 * * *'

	permissions:
	contents: read

	jobs:
	cargo-deny:
	runs-on: ubuntu-20.04
	strategy:
	matrix:
	checks:
	- advisories
	- sources
	- bans

	# Prevent sudden announcement of a new advisory from failing ci:
	continue-on-error: ${{ matrix.checks == 'sources' }}

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
	with:
	egress-policy: audit

	- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
	- run: git config --global http.postBuffer 524288000
	- run: git config --global http.sslVerify "false"
	- run: git submodule update --init --recursive --depth 1
	- run: bash sh_script/pre-build.sh
	- uses: EmbarkStudios/cargo-deny-action@8371184bd11e21dcf8ac82ebf8c9c9f74ebf7268 # v2.0.1
	with:
	command: check ${{ matrix.checks }}

Provide feedback