deny.yml

name: Cargo Deny

permissions: {}

on:
  workflow_dispatch:
  pull_request:
    types: [opened, synchronize]
    paths:
      - 'Cargo.lock'
      - 'deny.toml'
      - '.github/workflows/deny.yml'
  push:
    branches:
      - main
    paths:
      - 'Cargo.lock'
      - 'deny.toml'
      - '.github/workflows/deny.yml'

concurrency:
  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
  cancel-in-progress: ${{ github.ref_name != 'main' }}

jobs:
  deny:
    name: Cargo Deny
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
        with:
          persist-credentials: false
          submodules: true

      - uses: oxc-project/setup-rust@23f38cfb0c04af97a055f76acee94d5be71c7c82  # v1.0.16
        with:
          restore-cache: false
          tools: cargo-deny

      - run: cargo deny check