33 lines
713 B
YAML
33 lines
713 B
YAML
name: Audit
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 0 * * 1"
|
|
push:
|
|
paths: [uv.lock]
|
|
pull_request:
|
|
paths: [uv.lock]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
audit:
|
|
name: Dependencies
|
|
runs-on: logaldeveloper-archlinux
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
|
|
- name: Cache uv packages
|
|
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
|
|
with:
|
|
path: ~/.cache/uv
|
|
key: uv-${{ hashFiles('uv.lock') }}
|
|
|
|
- name: Install dependencies
|
|
run: uv sync --frozen
|
|
|
|
- name: Audit dependencies with pip-audit
|
|
run: uv run pip-audit --skip-editable
|