Repository navigation

Bump the actions group across 1 directory with 2 updates #4

	# This workflow audits the package dependencies for known vulnerabilities
	# It is separate from python-package.yml so that a new advisory never blocks a release

	name: security

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	schedule:
	- cron: "0 6 * * 1" # weekly, catches new advisories between pushes
	workflow_dispatch:

	permissions:
	contents: read

	jobs:
	pip-audit:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v7
	- name: Set up Python
	uses: actions/setup-python@v7
	with:
	python-version: "3.13"
	- name: Install pip-audit
	run: python -m pip install --upgrade pip pip-audit
	- name: Audit dependencies
	# resolves the dependencies of pyproject.toml in an isolated environment, so only these are audited
	run: pip-audit .