Pull Request Template

Checklist

• Confirmed that run-checks all script has been executed.
• Made sure the book is up to date with changes in this PR.

Changes

This PR adds a scheduled event for dependencies checks and also improve the audit action through the addition of an audit.toml file.

This PR fixes #975, below the list of items:

• Determine the optimal frequency for the scheduled udeps scans
  • weekly: in this way we can immediately find unused deps, but at the same time we do not block development
• Define the scope and parameters of the udeps scans.
  • codebase: Unused deps should be detected in each crate, that is why the --all-targets feature is enabled. If some false-positives are found, they can be ignored setting up the respective field in the Cargo.toml file
• Develop a workflow for handling and addressing issues identified in the scans.
  • CI run logs: We can use logs to identify the unused deps without creating new issues
  • Issues for Audit vulnerabilities: Audit finds vulnerabilities in dependencies, we can open issues for dependencies vulnerabilities. It already does that on main branch as stated here
• Integrate the scheduled scan action into the existing CI/CD system.
  • Done in this PR