diff --git a/.gitea/workflows/security.yml b/.gitea/workflows/security.yml new file mode 100644 index 0000000..ab67cc0 --- /dev/null +++ b/.gitea/workflows/security.yml @@ -0,0 +1,36 @@ +# ============================================================ +# Security checks +# Проверка уязвимостей зависимостей +# ============================================================ + +name: Security + +on: + schedule: + - cron: "0 3 * * 1" + + workflow_dispatch: + +jobs: + + security-scan: + name: Dependency security scan + runs-on: ubuntu-latest + + steps: + + - name: Checkout repository + uses: actions/checkout@v4 + + # Установка Python + - uses: actions/setup-python@v5 + with: + python-version: "3.12" + + # Установка инструмента проверки + - name: Install pip-audit + run: pip install pip-audit + + # Проверка зависимостей + - name: Run security audit + run: pip-audit