ci: add cargo-audit step to catch crates with known CVEs

Runs after cargo test in the test job. Uses --locked for reproducibility.
2026-09-22 00:00:50 +00:00 · 2026-03-27 23:45:36 -05:00
parent 6cd37068e3
commit c9e9221caf
1 changed files with 4 additions and 0 deletions
@@ -27,6 +27,10 @@ jobs:
        run: cargo build
      - name: Test
        run: cargo test
+      - name: Security audit
+        run: |
+          cargo install cargo-audit --locked --quiet
+          cargo audit

  build-release:
    name: Build (${{ matrix.target }})