chore(deps): bump the actions-updates group with 5 updates #452

	name: Security Audit

	on:
	push:
	branches: [main]
	paths:
	- "**/Cargo.toml"
	- "**/Cargo.lock"
	- "deny.toml"
	- ".github/workflows/audit.yml"
	pull_request:
	branches: [main]
	paths:
	- "**/Cargo.toml"
	- "**/Cargo.lock"
	- "deny.toml"
	- ".github/workflows/audit.yml"

	permissions: {}

	concurrency:
	group: audit-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	audit:
	name: cargo audit
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	# GitHub-hosted runners ship with `rustup`; install + override
	# the workspace's `rust-toolchain.toml` pin (MSRV) with stable
	# for this job inline rather than via a third-party action.
	- name: Install Rust stable
	run: \|
	rustup toolchain install stable --profile minimal --no-self-update
	rustup override set stable
	# Pull `cargo-audit` from prebuilt artifacts rather than building
	# it from source every run; saves ~30s per audit invocation.
	- uses: taiki-e/install-action@ed67fa35ac944f3a9b33f12c4dd43b6f31a47e20 # v2.83.3
	with:
	tool: cargo-audit
	- run: cargo audit

	deny:
	name: cargo deny
	runs-on: ubuntu-latest
	permissions:
	contents: read # read repo
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
	with:
	persist-credentials: false
	- uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1

Navigation Menu