mirror of
https://github.com/openobserve/openobserve.git
synced 2026-11-05 08:09:22 +00:00
dependabot[bot]
2a823f9fd4
Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
37 lines
1.3 KiB
YAML
37 lines
1.3 KiB
YAML
name: Security audit
|
|
on:
|
|
# Advisories only matter when the dependency set changes, so PR runs are path-filtered to the
|
|
# Cargo manifests; the weekly run catches advisories published against unchanged deps.
|
|
pull_request:
|
|
types: [opened, reopened, synchronize, labeled, unlabeled, ready_for_review, converted_to_draft]
|
|
paths:
|
|
- "**/Cargo.toml"
|
|
- "**/Cargo.lock"
|
|
- ".github/workflows/audit-checker.yml"
|
|
schedule:
|
|
- cron: "0 3 * * 1"
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
security_audit:
|
|
# Nothing runs on a PR without the 'ready-for-ci' label, or on a draft; ci-gate alone reports the state.
|
|
if: ${{ github.event_name != 'pull_request' || (contains(github.event.pull_request.labels.*.name, 'ready-for-ci') && github.event.pull_request.draft == false) }}
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@v5
|
|
- uses: ./.github/actions/github-auth
|
|
- uses: taiki-e/install-action@83ac0ad63c0167e6f06796fab0fce28db1bf3db0 # v2.87.22
|
|
env:
|
|
GITHUB_TOKEN: ${{ github.token }}
|
|
with:
|
|
tool: cargo-audit
|
|
- name: run cargo audit
|
|
run: cargo audit
|