actions-rust-lang/cargo audit your Rust Dependencies
Audit Rust dependencies with cargo audit and the RustSec Advisory DB
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 6, 2026
- License
- MIT
Pinned Snippet
uses: actions-rust-lang/audit@72c09e02f132669d52284a3323acdb503cfc1a24 # v1.2.7tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| TOKEN | The GitHub access token to allow us to retrieve, create and update issues (automatically set) | no | ${{ github.token }} |
| denyWarnings | Any warnings generated will be treated as an error and fail the action | no | false |
| file | The path to the Cargo.lock file to inspect | no | "" |
| ignore | A comma separated list of Rustsec IDs to ignore | no | "" |
| createIssues | Create/Update issues for each found vulnerability. | no | ${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/main' }} |
| workingDirectory | Run `cargo audit` from the given working directory | no | "" |
Outputs
no outputs