Repository navigation

build(deps): bump the codeql-action group with 4 updates #3314

	name: cargo-deny
	on:
	push:
	branches: [ "main" ]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [ "main" ]
	schedule:
	- cron: '0 0 * * *'

	permissions:
	contents: read

	jobs:
	cargo-deny:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	checks:
	- advisories
	- sources
	- bans

	# Prevent sudden announcement of a new advisory from failing ci:
	continue-on-error: ${{ matrix.checks == 'sources' }}

	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1
	with:
	egress-policy: audit

	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	submodules: recursive
	- run: bash sh_script/preparation.sh
	- uses: EmbarkStudios/cargo-deny-action@3c6349835b2b7b196a839186cb8b78e02f7b5f25 # v2.1.1
	with:
	command: check ${{ matrix.checks }}