Implement streaming file encryption utilities #87

	name: Security Checks

	on:
	push:
	branches: ["main"]
	pull_request:
	branches: ["main"]

	jobs:
	security:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v3
	- name: Set up Python
	uses: actions/setup-python@v3
	with:
	python-version: '3.11'
	- name: Install tools
	run: \|
	python -m pip install --upgrade pip
	pip install -r requirements.txt
	pip install bandit cyclonedx-bom
	- name: Bandit Scan
	run: bandit --exit-zero -r ChatApp WebSocketChatApp -f json -o bandit-report.json
	- name: Trivy File Scan
	uses: aquasecurity/trivy-action@0.31.0
	with:
	scan-type: fs
	ignore-unfixed: true
	exit-code: 1
	output: trivy-report.txt
	- name: Generate SBOM
	run: cyclonedx-py requirements -o sbom.xml requirements.txt
	- name: Upload artifacts
	if: always()
	uses: actions/upload-artifact@v4
	with:
	name: security-reports
	path: \|
	bandit-report.json
	trivy-report.txt
	sbom.xml

Provide feedback