security-audit.yaml

name: Security Audit
on:
  pull_request:
    branches:
      - main
    paths:
      - "**/Cargo.toml"
      - "**/Cargo.lock"
      - ".github/workflows/security-audit.yaml"
  schedule:
    - cron: "0 0 * * *" # once a day at midnight UTC
    # NB: that cron trigger on GH actions runs only on the default branch

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}

jobs:
  security_audit:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v1
      - run: |
          # ignores error due to atty unsound warning
          # with no solution: TODO remove the ignore
          cargo audit --ignore RUSTSEC-2021-0145