Repository navigation

Move tempfile to dev-dependencies and drop clap_derive #510

	name: Security audit

	on:
	schedule:
	- cron: 0 0 * * 1
	push:
	paths:
	- '**/Cargo.toml'
	- '**/Cargo.lock'
	pull_request:

	jobs:
	audit:
	runs-on: ubuntu-latest
	permissions:
	# rustsec/audit-check reports advisories as a check run on push/PR and
	# opens issues on the scheduled run.
	checks: write
	contents: read
	issues: write
	# cargo-audit's dependency tree can require a newer rustc than this repo's
	# pinned rust-toolchain.toml (used to build the actual crate). Override
	# with the runner's default stable toolchain just for this job so
	# `cargo install cargo-audit` isn't stuck on our pin.
	env:
	RUSTUP_TOOLCHAIN: stable
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false
	- uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
	with:
	token: ${{ secrets.GITHUB_TOKEN }}