Repository navigation

chore(deps): Bump taiki-e/install-action from 2.58.4 to 2.61.5 #5088

	name: Security audit

	permissions:
	contents: read

	on:
	schedule:
	- cron: '0 0 * * *'
	push:
	paths:
	- '.github/workflows/audit.yml'
	- '**/Cargo.toml'
	- '**/Cargo.lock'
	pull_request:
	paths:
	- '.github/workflows/audit.yml'
	- '**/Cargo.toml'
	- '**/Cargo.lock'

	env:
	RUST_BACKTRACE: 1
	CARGO_TERM_COLOR: always
	CLICOLOR: 1

	jobs:
	cargo-deny:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	checks:
	- advisories
	- bans licenses sources

	# Prevent sudden announcement of a new advisory from failing ci:
	continue-on-error: ${{ matrix.checks == 'advisories' }}

	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
	with:
	egress-policy: audit

	- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

	- uses: EmbarkStudios/cargo-deny-action@34899fc7ba81ca6268d5947a7a16b4649013fea1 # v2.0.11
	with:
	command: check ${{ matrix.checks }}
	rust-version: stable