chore(security): add pip-audit dependency scanning to CI (#7) #12

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	lint-and-test:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Python 3.12
	uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
	with:
	python-version: "3.12"

	- name: Install dependencies
	run: pip install -e ".[dev]"

	- name: Lint with ruff
	run: ruff check src/ tests/

	- name: Run unit tests
	run: pytest tests/ -v -m "not integration"

	- name: Run pip-audit
	run: \|
	pip install pip-audit
	pip-audit --desc

Provide feedback