Periodic audits #125

	name: Periodic audits
	on:
	schedule:
	- cron: "0 0 * * *"
	push:
	paths:
	- .github/workflows/audit.yml

	jobs:
	security:
	name: Verify that all our deps are secure
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v1

	- name: Install rust
	id: rust-install
	uses: dtolnay/rust-toolchain@stable

	- name: Cache
	uses: actions/cache@v3
	with:
	path: \|
	~/.cargo
	target/
	key: ${{ runner.os }}-${{ steps.rust-install.outputs.cachekey }}-cargo

	- name: Install cargo-audit
	run: cargo install cargo-audit

	- name: Audit
	run: \|
	cargo audit -D warnings \
	--ignore RUSTSEC-2021-0145 # Transitive through criterion; awaiting new release with https://github.com/bheisler/criterion.rs/pull/628

	nightly_compat:
	name: See if future Rust versions will break anything
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@v1
	with:
	submodules: true

	- name: Install rust
	id: rust-install
	uses: dtolnay/rust-toolchain@nightly
	with:
	components: clippy

	# Normally this would be where we use actions/cache, but since nightly
	# is likely to change on every run, it doesn't seem worth it

	- name: Test
	env:
	RUSTFLAGS: -D warnings
	run: \|
	cargo +${{steps.rust-install.outputs.name}} test
	cargo +${{steps.rust-install.outputs.name}} test --all-features

	- name: Clippy
	run: \|
	cargo +${{steps.rust-install.outputs.name}} clippy -- -D warnings
	cargo +${{steps.rust-install.outputs.name}} clippy --all-features -- -D warnings

Provide feedback