1name: Run cargo-audit
2on:
3  schedule:
4    - cron: '0 0 * * *'
5jobs:
6  security_audit:
7    runs-on: ubuntu-latest
8    env:
9      CARGO_AUDIT_VERSION: 0.22.1
10    steps:
11      - uses: actions/checkout@v4
12        with:
13          submodules: true
14      - uses: actions/cache@v4
15        with:
16          path: ${{ runner.tool_cache }}/cargo-audit
17          key: cargo-audit-${{ env.CARGO_AUDIT_VERSION }}
18      - run: |
19          echo "${{ runner.tool_cache }}/cargo-audit/bin" >> $GITHUB_PATH
20          cargo install --root ${{ runner.tool_cache }}/cargo-audit --version ${{ env.CARGO_AUDIT_VERSION }} cargo-audit --locked
21      - uses: rustsec/audit-check@v2
22        with:
23          token: ${{ secrets.GITHUB_TOKEN }}
24        # This seems to hit rate limits about 50% of the time, unclear why, but
25        # emailing us once every few days is not the most useful thing.
26        continue-on-error: true
27