name: baseline

on:
  push:
  pull_request:

permissions:
  contents: read

jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
      - name: Install pinned Rust toolchain
        run: rustup toolchain install 1.97.1 --profile minimal --component clippy,rustfmt
      - name: Verify repository
        run: make verify
      - name: Install pinned dependency auditor
        run: cargo install --locked cargo-deny --version 0.20.2
      - name: Audit advisories, dependencies, licenses, and sources
        run: make audit