Skip to content

Python Security Audit #167

Python Security Audit

Python Security Audit #167

name: Python Security Audit
on:
push:
branches: [ main ]
pull_request:
branches: [ main ]
schedule:
- cron: '0 4 * * *' # Audit giornaliero alle 6:00 UTC
permissions:
contents: read
jobs:
pip-audit:
name: pip-audit on Python ${{ matrix.python-version }}
runs-on: ubuntu-latest
strategy:
matrix:
python-version: [ '3.12', '3.13', '3.14' ]
steps:
- name: Checkout repository
uses: actions/checkout@v4
- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v4
with:
python-version: ${{ matrix.python-version }}
- name: Upgrade pip and install dependencies
run: |
python -m pip install --upgrade pip
pip install -r requirements.txt -c constraints.txt
- name: Run pip-audit
run: |
pip install pip-audit
pip-audit