diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml new file mode 100644 index 0000000..080bc74 --- /dev/null +++ b/.github/workflows/audit.yml @@ -0,0 +1,14 @@ +name: Security audit +on: + push: + paths: + - '**/Cargo.toml' + - '**/Cargo.lock' +jobs: + security_audit: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@v3 + - uses: rustsec/audit-check@v1.4.1 + with: + token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index bde4ecd..4cfd914 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,10 +21,6 @@ jobs: run: cargo clippy --verbose - name: Run Tests run: cargo test --verbose - - name: Install Audit - run: cargo install cargo-audit - - name: Run Audit - run: cargo audit --deny warnings - name: Install Formatting nightly uses: actions-rs/toolchain@v1 with: diff --git a/Cargo.toml b/Cargo.toml index d1ee210..53975d8 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -27,9 +27,9 @@ serde = ["dep:serde", "serde/derive"] byteorder = "1.4.3" bzip2-rs = "0.1.2" crc32fast = "1.3.2" -serde_json = "1.0.91" +serde_json = "1.0.100" -serde = { version = "1.0.155", optional = true } +serde = { version = "1.0.171", optional = true } phf = { version = "0.11", optional = true, features = ["macros"] }