name: Audit

on:
  push:
    paths:
      - "**/Cargo.toml"
      - "**/Cargo.lock"
  schedule:
    - cron: "0 0 * * *"
  workflow_dispatch:

jobs:
  audit:
    name: cargo audit
    runs-on: ubuntu-latest
    permissions:
      issues: write
    steps:
      - name: Checkout
        uses: actions/checkout@v6
      - name: Install rust toolchain
        uses: dtolnay/rust-toolchain@nightly
      - name: Setup rust cache
        uses: Swatinem/rust-cache@v2
      - name: Audit check
        uses: https://git.huizinga.dev/infra/rust-audit-check@v3.0.0
        with:
          token: ${{ secrets.GITEA_TOKEN }}