• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1name: Security audit
2
3on:
4  schedule:
5    - cron: '0 0 * * *'
6
7env:
8  # Disable incremental compilation.
9  #
10  # Incremental compilation is useful as part of an edit-build-test-edit cycle,
11  # as it lets the compiler avoid recompiling code that hasn't changed. However,
12  # on CI, we're not making small edits; we're almost always building the entire
13  # project from scratch. Thus, incremental compilation on CI actually
14  # introduces *additional* overhead to support making future builds
15  # faster...but no future builds will ever occur in any given CI environment.
16  #
17  # See https://matklad.github.io/2021/09/04/fast-rust-builds.html#ci-workflow
18  # for details.
19  CARGO_INCREMENTAL: 0
20  # Allow more retries for network requests in cargo (downloading crates) and
21  # rustup (installing toolchains). This should help to reduce flaky CI failures
22  # from transient network timeouts or other issues.
23  CARGO_NET_RETRY: 10
24  RUSTUP_MAX_RETRIES: 10
25  # Don't emit giant backtraces in the CI logs.
26  RUST_BACKTRACE: short
27
28jobs:
29  security_audit:
30    runs-on: ubuntu-latest
31    steps:
32      - uses: actions/checkout@v3
33      - uses: actions-rs/audit-check@v1
34        with:
35          token: ${{ secrets.GITHUB_TOKEN }}
36