Merge pull request #644 from yahia008/register-multiple-IP #31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dependency Scan | |
| # Dependency vulnerability scanning (#554). | |
| # | |
| # Scans the Cargo dependency tree for known vulnerabilities (RustSec) and | |
| # yanked crates on every change to the lockfile/manifests, on a weekly | |
| # schedule, and on demand. Complements the broader policy checks in | |
| # security.yml. | |
| on: | |
| push: | |
| branches: [main] | |
| paths: | |
| - '**/Cargo.toml' | |
| - '**/Cargo.lock' | |
| - 'deny.toml' | |
| - '.github/workflows/dependency-scan.yml' | |
| pull_request: | |
| paths: | |
| - '**/Cargo.toml' | |
| - '**/Cargo.lock' | |
| - 'deny.toml' | |
| - '.github/workflows/dependency-scan.yml' | |
| schedule: | |
| # Daily so freshly disclosed advisories are caught quickly. | |
| - cron: '0 5 * * *' | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| issues: write | |
| concurrency: | |
| group: dependency-scan-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| # ---------------------------------------------------------------------- | |
| # cargo-audit against the RustSec advisory database. | |
| # ---------------------------------------------------------------------- | |
| cargo-audit: | |
| name: cargo-audit | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Audit dependencies | |
| uses: rustsec/audit-check@v2 | |
| with: | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| # ---------------------------------------------------------------------- | |
| # cargo-deny advisories — second source of truth, fails the PR directly. | |
| # ---------------------------------------------------------------------- | |
| cargo-deny-advisories: | |
| name: cargo-deny advisories | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - uses: EmbarkStudios/cargo-deny-action@v2 | |
| with: | |
| command: check advisories |