From 43d3c5e222b5e62efc57023afdcbcb1a22ab1ded Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B6nke=20Liebau?= Date: Thu, 18 Feb 2021 09:12:05 +0100 Subject: [PATCH 1/2] Enable Dependabot --- .github/dependabot.yml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..219c13a --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,6 @@ +version: 2 +updates: + - package-ecosystem: "cargo" + directory: "/" + schedule: + interval: "daily" From 9d9acf02adda3cd367d0dbdb2ea17e4ec70da9dc Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B6nke=20Liebau?= Date: Thu, 18 Feb 2021 09:14:02 +0100 Subject: [PATCH 2/2] Enable security audit --- .github/workflows/rust.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index 8dc9b51..dd2c42f 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -45,3 +45,13 @@ jobs: run: cargo build --verbose - name: Run tests run: cargo test --verbose + + + security_audit: + name: Run security audit + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - uses: actions-rs/audit-check@v1 + with: + token: ${{ secrets.GITHUB_TOKEN }}