Skip to content

chore(ci): bump actions/setup-python from 5.6.0 to 6.2.0 #12

chore(ci): bump actions/setup-python from 5.6.0 to 6.2.0

chore(ci): bump actions/setup-python from 5.6.0 to 6.2.0 #12

Workflow file for this run

name: Security
on:
push:
branches: [main]
pull_request:
branches: [main]
schedule:
- cron: '0 6 * * 1'
jobs:
pip-audit:
name: Dependency Audit
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: "3.13"
- name: Install dependencies
run: pip install -e ".[dev]"
- name: Install pip-audit
run: pip install pip-audit
- name: Run pip-audit
run: pip-audit
bandit:
name: Static Analysis
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: "3.13"
- name: Install bandit
run: pip install bandit
- name: Run bandit
run: bandit -r src/ -c pyproject.toml || bandit -r src/