audit.yml

name: Audit
on:
  pull_request:
    paths:
      - .github/workflows/audit.yml
      - Cargo.lock
      - Cargo.toml
      - deny.toml
      - Justfile
  push:
    branches:
      - main
  schedule:
    - cron: 0 2 * * *
  workflow_dispatch: ~

permissions: read-all

env:
  RUST_BACKTRACE: 1

jobs:
  cargo:
    name: Cargo
    runs-on: ubuntu-22.04
    steps:
      - name: Checkout repository
        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
      - name: Cache Rust & Cargo
        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
        with:
          path: |
            ~/.cargo/registry/index/
            ~/.cargo/registry/cache/
            ~/.cargo/git/db/
            target/
          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
      - name: Install Rust toolchain
        run: rustup show
      - name: Install Just
        uses: taiki-e/install-action@1d74f337f279f52e54c352ebe5b96eaa36c948d3 # v2.9.0
        with:
          tool: just@1
      - name: Install cargo-deny
        uses: taiki-e/install-action@1d74f337f279f52e54c352ebe5b96eaa36c948d3 # v2.9.0
        with:
          tool: cargo-deny@0.13.9
      - name: Audit
        run: just ci-audit