From 688e3a206e30e55344d86f8bee0776aa5ea2e404 Mon Sep 17 00:00:00 2001 From: Sai Karthik <11899221+kskarthik@users.noreply.github.com> Date: Fri, 6 Feb 2026 02:16:34 +0530 Subject: [PATCH] feat(ci): add cargo-audit workflow for scanning rust vulnerabilities (#6351) Signed-off-by: Sai Karthik --- .github/workflows/cargo-audit.yml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 .github/workflows/cargo-audit.yml diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml new file mode 100644 index 0000000000..55b50fb71a --- /dev/null +++ b/.github/workflows/cargo-audit.yml @@ -0,0 +1,31 @@ +name: "Cargo Audit" +on: + push: + paths: + # Run if workflow changes + - '.github/workflows/cargo-audit.yml' + # Run on changed dependencies + - '**/Cargo.toml' + - '**/Cargo.lock' + # Run if the configuration file changes + - '**/audit.toml' + # Rerun periodically to pick up new advisories + schedule: + - cron: '0 0 * * *' + # Run manually + workflow_dispatch: + +jobs: + audit: + runs-on: ubuntu-latest + permissions: + contents: read + issues: write + steps: + - uses: actions/checkout@v4 + # https://github.com/marketplace/actions/cargo-audit-your-rust-dependencies + - uses: actions-rust-lang/audit@72c09e02f132669d52284a3323acdb503cfc1a24 + name: Audit Rust Dependencies + # with: + # Comma separated list of issues to ignore + # ignore: RUSTSEC-2020-0036