pip-audit.yaml

---
    name: pip-audit
    
    on:
      push:
        branches: [ dev, main ]
      pull_request:
        branches: [ dev, main ]
      schedule: [ cron: "0 7 * * 2" ]
    
    concurrency:
      group: ${{ github.workflow }}-${{ github.ref }}
      cancel-in-progress: true
    
    jobs:
      audit:
        runs-on: ubuntu-latest
    
        steps:
          - name: Checkout repository
            uses: actions/checkout@v4
    
          - name: Install Python
            uses: actions/setup-python@v5
            with:
              python-version: "3.10"
    
          - name: Install Slither
            run: |
              python -m venv /tmp/pip-audit-env
              source /tmp/pip-audit-env/bin/activate
    
              python -m pip install --upgrade pip setuptools wheel
              python -m pip install .
    
          - name: Run pip-audit
            uses: pypa/gh-action-pip-audit@v1.0.8
            with:
              virtual-environment: /tmp/pip-audit-env