ci: merge audit

name: Audit

on:

  push:

    branches:

      - main

    paths: 

      - '**/Cargo.toml'

      - '**/Cargo.lock'

  pull_request:

    branches:

      - main

      - 'feat/**'

    paths: 

      - '**/Cargo.toml'

      - '**/Cargo.lock'

  schedule:

    - cron: '0 0 * * 0' # at midnight of each sunday

  workflow_dispatch:

jobs:

  skip-check:

    runs-on: ubuntu-latest

    outputs:

      should_skip: ${{ steps.skip_check.outputs.should_skip }}

    steps:

      - id: skip_check

        uses: fkirc/skip-duplicate-actions@v5

  audit:

    needs: skip-check

    if: needs.skip-check.outputs.should_skip != 'true'

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v4

      - uses: taiki-e/install-action@v2

        with:

          tool: cargo-audit

      - run: cargo audit -D warnings

      - uses: Swatinem/rust-cache@v2

      - run: just ci-test

  audit:

    needs: skip-check

    if: needs.skip-check.outputs.should_skip != 'true'

    runs-on: ubuntu-latest

    steps:

      - uses: actions/checkout@v4

      - uses: taiki-e/install-action@cargo-audit

      - run: cargo audit -D warnings

  mint:

    needs: skip-check

    if: needs.skip-check.outputs.should_skip != 'true'