{"path":".github/workflows/security.yml","size":1134,"locked":false,"binary":false,"truncated":false,"content":"name: Security Audit\n\non:\n  push:\n    branches: [main, beta]\n  pull_request:\n    branches: [main, beta]\n  schedule:\n    - cron: \"0 6 * * 1\"\n\npermissions:\n  contents: read\n\njobs:\n  cargo-audit:\n    runs-on: ubuntu-22.04\n    steps:\n      - uses: actions/checkout@v4\n      - uses: dtolnay/rust-toolchain@stable\n      - name: Install cargo-audit\n        run: cargo install cargo-audit --locked\n      - name: Run cargo audit\n        # Solana 1.18.26 transitively pins curve25519-dalek 3.2.1;\n        # upgrading it independently is incompatible with Anchor 0.30.1.\n        run: >-\n          cargo audit\n          --ignore RUSTSEC-2022-0093\n          --ignore RUSTSEC-2024-0344\n\n  pnpm-audit:\n    runs-on: ubuntu-22.04\n    steps:\n      - uses: actions/checkout@v4\n      - uses: pnpm/action-setup@v4\n        with:\n          version: 11\n          run_install: false\n      - uses: actions/setup-node@v4\n        with:\n          node-version: \"22\"\n          cache: pnpm\n      - name: Install workspace dependencies\n        run: pnpm install --frozen-lockfile\n      - name: Audit workspace dependencies\n        run: pnpm audit --audit-level=high\n"}