rustsec-audit.yml

##
# This GitHub Action is using cargo-audit to perform an audit for crates with security vulnerabilities.
# https://github.com/rustsec/audit-check
##

name: Rustsec Cargo Audit
on:
  workflow_dispatch:
  push:
    paths:
      - "**/Cargo.toml"
      - "**/Cargo.lock"
  schedule:
    - cron: "40 13 * * 0"
jobs:
  security_audit:
    runs-on: ${{ fromJson(github.repository_owner == 'autonomys' && '["self-hosted", "ubuntu-20.04-x86-64"]' || '"ubuntu-22.04"') }}
    steps:
      - uses: actions/checkout@v3
      - uses: rustsec/audit-check@dd51754d4e59da7395a4cd9b593f0ff2d61a9b95 #v1.4.1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          # TODO: Remove first two Substrate upgrades libp2p and we no longer have rustls 0.20.9 and curve25519-dalek 3.2.0
          #  in our dependencies: https://github.com/paritytech/polkadot-sdk/pull/1631
          # TODO: Remove third once https://github.com/paritytech/polkadot-sdk/pull/4799 is used to remove old and
          #  vulnerable ed25519-dalek (we are not using litep2p anyway)
          ignore: RUSTSEC-2024-0336,RUSTSEC-2024-0344,RUSTSEC-2022-0093