From fc8ab80552be2da1d5dc9211b49ce847a9b7638b Mon Sep 17 00:00:00 2001
From: Oliver Hamlet <git@ortham.net>
Date: Sun, 28 Sep 2025 20:38:46 +0100
Subject: [PATCH] Add a CI job to run cargo vet

---
 .github/workflows/ci.yml | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 946bd2ce..ebf26764 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -32,6 +32,29 @@ jobs:
           cargo clippy -- --version
           cargo clippy --workspace --all-targets -- -Dwarnings
 
+  cargo-vet:
+    runs-on: ubuntu-24.04
+
+    env:
+      CARGO_VET_VERSION: 0.10.1
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - uses: actions/cache@v4
+      with:
+        path: ${{ runner.tool_cache }}/cargo-vet
+        key: cargo-vet-bin-${{ env.CARGO_VET_VERSION }}
+
+    - name: Add the tool cache directory to the search path
+      run: echo "${{ runner.tool_cache }}/cargo-vet/bin" >> $GITHUB_PATH
+
+    - name: Ensure that the tool cache is populated with the cargo-vet binary
+      run: cargo install --root ${{ runner.tool_cache }}/cargo-vet --version ${{ env.CARGO_VET_VERSION }} cargo-vet
+
+    - name: Invoke cargo-vet
+      run: cargo vet --locked
+
   rust:
     strategy:
       matrix: