fix: fix security scan

Author: DiogoRibeiro7

.github/workflows/security.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      # Use the same Python that your project targets
+      # Match your project target
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
@@ -24,23 +24,38 @@ jobs:
           pipx install poetry
           poetry --version
 
-      # Install project deps in Poetry venv (dev group included so scanners are available)
+      # (Optional) cache to speed up installs
+      - name: Cache Poetry
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/pypoetry
+            ~/.local/share/pypoetry
+          key: ${{ runner.os }}-poetry-${{ hashFiles('**/poetry.lock') }}
+          restore-keys: ${{ runner.os }}-poetry-
+
+      # Install your project + dev tools in the Poetry venv
       - name: Install dependencies with Poetry
         run: |
           poetry install --with dev --no-interaction --no-ansi
 
-      # --- Bandit: run in the project venv, tune failure level if desired ---
+      # Keep the venv's tooling up to date (reduces false positives)
+      - name: Update security tooling in venv
+        run: |
+          poetry run python -m pip install --upgrade pip setuptools wheel
+          poetry run python -m pip install --upgrade safety pip-audit
+
+      # Bandit scans your source tree
       - name: Bandit (security linter)
         run: |
           poetry run bandit -r min_ratio_cycle/ --severity-level medium --confidence-level high
 
-      # OPTION A: Safety scans the *installed* packages inside your Poetry venv
+      # Safety scans the installed packages in the Poetry venv
       - name: Safety (scan installed env)
         run: |
-          poetry run pip install --upgrade safety
           poetry run safety check --full-report
 
-      - name: pip-audit (scan exported requirements, not global env)
+      # pip-audit scans the installed packages in the Poetry venv
+      - name: pip-audit (strict)
         run: |
-          pipx install pip-audit
-          pip-audit -r requirements.txt --strict
+          poetry run pip-audit --strict