name: Security Audit

on:
  schedule:
    - cron: "0 0 * * 0" # Weekly
  workflow_dispatch:

jobs:
  safety:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: ${{ vars.PYTHON_VERSION }}

      - name: Install uv
        run: pip install uv

      - name: Install safety
        run: pip install safety

      - name: Install dependencies
        run: uv pip install --group dev --system

      - name: Run safety check
        run: safety check