36 lines
748 B
YAML
36 lines
748 B
YAML
name: Audit
|
|
|
|
on:
|
|
schedule:
|
|
- cron: "0 0 * * 1"
|
|
push:
|
|
paths: [uv.lock]
|
|
pull_request:
|
|
paths: [uv.lock]
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
env:
|
|
UV_PYTHON_DOWNLOADS: never
|
|
|
|
jobs:
|
|
audit:
|
|
name: Dependencies
|
|
runs-on: logaldeveloper-archlinux
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
|
|
- name: Cache uv packages
|
|
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
|
|
with:
|
|
path: ~/.cache/uv
|
|
key: uv-${{ hashFiles('uv.lock') }}
|
|
|
|
- name: Install dependencies
|
|
run: uv sync --locked
|
|
|
|
- name: Audit dependencies with pip-audit
|
|
run: uv run pip-audit --skip-editable
|