From 65342205e2ef85c967db59a47581a0f9d402ae3e Mon Sep 17 00:00:00 2001 From: Dimitri Merejkowsky Date: Sat, 30 Oct 2021 14:52:50 +0200 Subject: [PATCH] Audit dependencies in a cron job New vulnerabilities are found all the time, no need to wait for Cargo.toml or Cargo.lock to change --- .github/workflows/audit.yml | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 3e2d1b8..336fee3 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -1,9 +1,8 @@ name: Audit dependencies on: - push: - paths: - - '**/Cargo.toml' - - '**/Cargo.lock' + schedule: + - cron: '0 1 * * *' + jobs: security_audit: runs-on: ubuntu-latest