Security Audit #368

	name: Security Audit

	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]
	schedule:
	# Run security audit daily at 00:00 UTC
	- cron: '0 0 * * *'

	jobs:
	audit:
	name: Dependency Audit
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
	with:
	toolchain: stable

	- name: Install cargo-audit
	run: cargo install cargo-audit --locked --version 0.22.1

	- name: Run security audit
	run: cargo audit

	- name: Run fuzz crate security audit
	run: cd fuzz && cargo audit

	deny:
	name: License and Dependency Check
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
	with:
	toolchain: stable

	- name: Install cargo-deny
	run: cargo install cargo-deny --locked --version 0.19.4

	- name: Check licenses
	run: cargo deny check licenses

	- name: Check advisories
	run: cargo deny check advisories

	- name: Check bans
	run: cargo deny check bans

	outdated:
	name: Outdated Dependencies
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Install Rust toolchain
	uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7
	with:
	toolchain: stable

	- name: Install cargo-outdated
	run: cargo install cargo-outdated --locked --version 0.19.0

	- name: Check for outdated dependencies
	run: cargo outdated --exit-code 1
	continue-on-error: true

Navigation Menu