chore: Security automation

lunatic-solutions / lunatic-rs

This library contains higher level Rust wrappers for low level Lunatic syscalls.

275 stars 31 forks source link

Closed pinkforest closed 1 year ago

pinkforest commented 1 year ago

This adds three automatic security automation & checks commonly in Rust :crab: ecosystem

dependabot - GitHub managed robot that sends PR's to bump minimum dependencies (which get tested as well)
cargo audit GitHub action via audit-check which will raise GitHub issue (via cron style GitHub action) for any security advisories pending
cargo deny GitHub action via Embark's own cargo-deny-action which checks upon PR configured by it's deny.toml for advisories, bans and licenses

bkolobara commented 1 year ago

I don't understand what this does, a short explanation would be really helpful here.

pinkforest commented 1 year ago

~~I'm still editing it sorry should have marked draft.~~ EDIT: Done

bkolobara commented 1 year ago

Thanks for putting the effort into setting this up @pinkforest! 🤗