feat: add proper rust caching to github workflows and ensure cargo audit is installed in rust security nox session

Author: 56kyle

{{cookiecutter.project_name}}/.github/workflows/build-rust.yml

@@ -54,6 +54,12 @@ jobs:
         with:
           targets: {{ "${{ matrix.platform.target }}" }}
 
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workdir: rust/
+          key: {{ "${{ matrix.platform.target }}" }}
+
       - name: Set up cross-compilation toolchain (Linux)
         if: contains(matrix.platform.target, 'linux')
         run: |

{{cookiecutter.project_name}}/.github/workflows/lint-rust.yml

@@ -33,6 +33,11 @@ jobs:
         with:
           components: "rustfmt,clippy"
 
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workdir: rust/
+
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
 

{{cookiecutter.project_name}}/.github/workflows/test-rust.yml

@@ -37,6 +37,11 @@ jobs:
       - name: Set up Rust
         run: rustup show
 
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          workdir: rust/
+
       - name: Set up uv
         uses: astral-sh/setup-uv@v6
 

{{cookiecutter.project_name}}/noxfile.py

@@ -148,8 +148,8 @@ def security_python(session: Session) -> None:
 @nox.session(python=False, name="security-rust", tags=[SECURITY, RUST])
 def security_rust(session: Session) -> None:
     """Run code security checks (cargo audit)."""
-    session.log("Installing security dependencies...")
-    session.run("cargo", "install", "cargo-audit", external=True)
+    session.log("Ensuring cargo-audit is available...")
+    session.run("cargo", "install", "cargo-audit", "--locked", external=True)
     session.run("cargo", "audit", "--all", external=True)