Security #23

	name: Security

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '0 6 * * 1'

	jobs:
	pip-audit:
	name: Dependency Audit
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

	- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
	with:
	python-version: "3.13"

	- name: Install dependencies
	run: pip install -e ".[dev]"

	- name: Install pip-audit
	run: pip install pip-audit

	- name: Run pip-audit
	run: pip-audit

	bandit:
	name: Static Analysis
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

	- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
	with:
	python-version: "3.13"

	- name: Install bandit
	run: pip install bandit

	- name: Run bandit
	run: bandit -r src/ -c pyproject.toml \|\| bandit -r src/

Provide feedback