From d2f403b77d86063140abfefcf50d3e536a74e3ca Mon Sep 17 00:00:00 2001 From: Jake Swenson Date: Sat, 11 Dec 2021 12:16:18 -0800 Subject: [PATCH] build(audits): Split security audit out of build workflow (#22) There are currently unfixable issues with `chrono 0.4.19` in security audits... Until these are fixable they are just showing up as build failures Splitting this into it's own workflow is probably the correct thing long term anyways --- .github/workflows/build.yml | 4 ---- .github/workflows/security.yml | 18 ++++++++++++++++++ 2 files changed, 18 insertions(+), 4 deletions(-) create mode 100644 .github/workflows/security.yml diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index c1dd3e9..700b49d 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -21,10 +21,6 @@ jobs: with: token: ${{ secrets.GITHUB_TOKEN }} args: --all-features - - name: Security audit - uses: actions-rs/audit-check@v1 - with: - token: ${{ secrets.GITHUB_TOKEN }} build: runs-on: ubuntu-latest steps: diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml new file mode 100644 index 0000000..142c06e --- /dev/null +++ b/.github/workflows/security.yml @@ -0,0 +1,18 @@ +name: Security Audits + +on: + schedule: + # Every Saturday at 1PM UTC (6AM PST) + chron: "0 13 * * 6" + pull_request: + branches: [ main ] + +jobs: + security-audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v2 + - name: Security audit + uses: actions-rs/audit-check@v1 + with: + token: ${{ secrets.GITHUB_TOKEN }}