Repository navigation

Cargo Audit #520

	name: Cargo Audit

	on:
	push:
	paths:
	- '**/Cargo.toml'
	- '**/Cargo.lock'
	schedule:
	# https://crontab.guru/
	- cron: '5 20 * * 5'

	jobs:
	pre_job:
	runs-on: ubuntu-latest
	outputs:
	should_skip: ${{ steps.skip_check.outputs.should_skip }}
	steps:
	- id: skip_check
	# https://github.com/marketplace/actions/skip-duplicate-actions
	uses: fkirc/skip-duplicate-actions@v5
	with:
	concurrent_skipping: 'same_content'
	do_not_skip: '["pull_request", "workflow_dispatch", "schedule"]'

	audit:
	needs: pre_job
	if: needs.pre_job.outputs.should_skip != 'true'
	runs-on: ubuntu-latest
	steps:
	- name: Checkout Moka
	uses: actions/checkout@v4

	- name: Check for known security vulnerabilities (Latest versions)
	uses: rustsec/audit-check@v1
	with:
	token: ${{ secrets.GITHUB_TOKEN }}

	- name: Install Rust nightly toolchain
	uses: dtolnay/rust-toolchain@master
	with:
	toolchain: nightly

	- name: Downgrade dependencies to minimal versions
	run: cargo update -Z minimal-versions

	- name: Check for known security vulnerabilities (Minimal versions)
	uses: rustsec/audit-check@v1
	with:
	token: ${{ secrets.GITHUB_TOKEN }}