audits.yml

name: Run Rust audits
on:
  schedule:
    - cron: '0 0 * * *'
  workflow_dispatch:
jobs:
  cargo-vet:
    name: Vet Dependencies
    runs-on: ubuntu-latest
    if: ${{ github.repository_owner == 'fermyon' }}
    env:
      CARGO_VET_VERSION: 0.7.0
    steps:
      - uses: actions/checkout@v3
      - name: Install Rust
        run: rustup update stable && rustup default stable
      - uses: actions/cache@v3
        with:
          path: ${{ runner.tool_cache }}/cargo-vet
          key: cargo-vet-bin-${{ env.CARGO_VET_VERSION }}
      - name: Add the tool cache directory to the search path
        run: echo "${{ runner.tool_cache }}/cargo-vet/bin" >> $GITHUB_PATH
      - name: Ensure that the tool cache is populated with the cargo-vet binary
        run: cargo install --root ${{ runner.tool_cache }}/cargo-vet --version ${{ env.CARGO_VET_VERSION }} cargo-vet
      - name: Invoke cargo-vet
        run: cargo vet --locked