aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorbors[bot] <26634292+bors[bot]@users.noreply.github.com>2021-03-04 19:23:17 +0000
committerGitHub <noreply@github.com>2021-03-04 19:23:17 +0000
commit223f093a0e6753c3e9abfd341f1d4771cc402fbd (patch)
tree545e91751965fcbd94e75c0d4d8329db79a6ce57
parent89a5c8004efaa8f42c86a1aedb609f49ec511333 (diff)
parent856d0ccb2fa20c3a3d7e58b6fec528befa9329e8 (diff)
Merge #454
454: Add periodic GHA job to run cargo audit r=korken89 a=AfoHT With the recent generic-array issue affecting heapless it seems wise to stay up to date with the latest advisories. Co-authored-by: Henrik Tjäder <henrik@grepit.se>
-rw-r--r--.github/workflows/audit.yaml12
-rw-r--r--.github/workflows/properties/audit.properties.json6
2 files changed, 18 insertions, 0 deletions
diff --git a/.github/workflows/audit.yaml b/.github/workflows/audit.yaml
new file mode 100644
index 0000000..abf0898
--- /dev/null
+++ b/.github/workflows/audit.yaml
@@ -0,0 +1,12 @@
+name: Security audit
+on:
+ schedule:
+ - cron: '0 0 * * *'
+jobs:
+ audit:
+ runs-on: ubuntu-20.04
+ steps:
+ - uses: actions/checkout@v1
+ - uses: actions-rs/audit-check@v1
+ with:
+ token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/properties/audit.properties.json b/.github/workflows/properties/audit.properties.json
new file mode 100644
index 0000000..fd3a848
--- /dev/null
+++ b/.github/workflows/properties/audit.properties.json
@@ -0,0 +1,6 @@
+{
+ "name": "Audit",
+ "description": "Cargo audit",
+ "iconName": "rust",
+ "categories": ["Rust"]
+}