actions-marketplace-validations/cargo audit your Rust Dependencies
Audit Rust dependencies with cargo audit and the RustSec Advisory DB
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 7, 2026
- License
- MIT
Pinned Snippet
uses: actions-marketplace-validations/actions-rust-lang_audit@d76fce7f5e78c3308aa0ced8f7f0242f47cdbdee # no releases — HEAD as of 2026-07-13tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| TOKEN | The GitHub access token to allow us to retrieve, create and update issues (automatically set) | no | ${{ github.token }} |
| denyWarnings | Any warnings generated will be treated as an error and fail the action | no | false |
| file | The path to the Cargo.lock file to inspect | no | "" |
| ignore | A comma separated list of Rustsec IDs to ignore | no | "" |
| createIssues | Create/Update issues for each found vulnerability. | no | ${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/main' }} |
| workingDirectory | Run `cargo audit` from the given working directory | no | "" |
Outputs
no outputs