From 93e0217f5537497ea0bdfb5d554debad459376f1 Mon Sep 17 00:00:00 2001 From: Magnus Kulke Date: Wed, 20 Dec 2023 12:24:35 +0100 Subject: [PATCH] Add cargo audit workflow (#43) Signed-off-by: Magnus Kulke --- .github/workflows/security.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/security.yml diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml new file mode 100644 index 0000000..ffa4024 --- /dev/null +++ b/.github/workflows/security.yml @@ -0,0 +1,24 @@ +name: Security audit +on: + workflow_dispatch: + schedule: + - cron: '0 0 * * *' + push: + paths: + - '**/Cargo.toml' + - '**/Cargo.lock' + +jobs: + az-cvm-vtpm: + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v3 + + # https://github.com/actions/checkout/issues/1430 + - name: Move az-cvm-vtpm/* to root + run: mv az-cvm-vtpm/* . + + - uses: rustsec/audit-check@v1.4.1 + with: + token: ${{ secrets.GITHUB_TOKEN }}