Skip to content

Merge pull request #960 from kubewarden/renovate/lock-file-maintenance #1484

Merge pull request #960 from kubewarden/renovate/lock-file-maintenance

Merge pull request #960 from kubewarden/renovate/lock-file-maintenance #1484

name: Security audit
on:
push:
paths:
- "**/Cargo.toml"
- "**/Cargo.lock"
# Declare default permissions as read only.
permissions: read-all
jobs:
security_audit:
runs-on: ubuntu-latest
permissions:
checks: write # for rustsec/audit-check to create check
contents: read # for actions/checkout to fetch code
issues: write # for rustsec/audit-check to create issues
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
with:
token: ${{ secrets.GITHUB_TOKEN }}