chore(ci): run cargo-audit for checking vulnerabilities

orhun · Feb 12, 2022 · cfe41fe · cfe41fe
1 parent d4cbb85
commit cfe41fe
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -0,0 +1,8 @@
+[advisories]
+ignore = [
+    "RUSTSEC-2020-0159", # `chrono` localtime_r segfault
+]
+
+[output]
+quiet = false
+deny = ["warnings"]
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -104,3 +104,14 @@ jobs:
           args: --exclude "%7Busername%7D|file:///|https://datatracker.ietf.org" -v *.md
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  audit:
+    name: Audit check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+      - name: Run cargo-audit
+        uses: actions-rs/audit-check@v1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}