add sast checks

.github/workflows/yxcvbn.yml

@@ -8,12 +8,13 @@ on:
 
 
 jobs:
-  clippy-rustfmt:
+  sast:
     runs-on: ubuntu-latest
+
     steps:
       - uses: actions/checkout@v2
 
-      - name: Install stable
+      - name: Install Rust stable
         uses: actions-rs/toolchain@v1
         with:
           profile: minimal
@@ -22,18 +23,33 @@ jobs:
           components: clippy, rustfmt
 
 
-      - name: Run rustfmt
+      - name: Format
         uses: actions-rs/cargo@v1
         with:
           command: fmt
           args: -- --check --verbose
 
-      - name: Lint
-        uses: actions-rs/clippy-check@v1
+      - name: Clippy
+        uses: actions-rs/cargo@v1
+        with:
+          command: clippy
+
+      - name: Check
+        uses: actions-rs/cargo@v1
+        with:
+          command: check
+          args: --workspace
+
+      - name: Install cargo-audit
+        uses: actions-rs/cargo@v1
+        with:
+          command: install
+          args: cargo-audit
+
+      - name: Audit
+        uses: actions-rs/cargo@v1
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
-          args: --all-features --tests --benches
-          name: lint
+          command: audit
 
   test:
     strategy: