Security Scan #223

	name: Security Scan

	on:
	push:
	branches: [main, main_deprecated, ship_v1.0, v1]
	pull_request:
	branches: [main, main_deprecated, ship_v1.0, v1]
	schedule:
	- cron: '0 0 * * 0' # weekly

	jobs:
	pip-audit:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.11'
	cache: 'pip'

	- name: Install pip-audit
	run: \|
	python -m pip install --upgrade pip
	pip install pip-audit

	- name: Audit production dependencies (Step 15)
	run: \|
	pip-audit -r requirements.txt

	- name: Audit pinned build dependencies
	run: \|
	pip-audit -r requirements-build.txt

	- name: Audit development dependencies
	run: \|
	pip-audit -r requirements-dev.txt

Provide feedback