This should wipe out action related security flags #1226

	name: Update Currencies

	on:
	push:
	branches: [ main ]
	workflow_dispatch:

	permissions:
	contents: write
	pull-requests: write

	jobs:
	update-currencies:
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
	with:
	fetch-depth: 0

	- name: Set up Python
	uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548
	with:
	python-version: '3.8'
	cache: 'pip'
	cache-dependency-path: .github/workflows/update-currencies/requirements.txt

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r .github/workflows/update-currencies/requirements.txt

	- name: Run currency update script
	run: python .github/scripts/update_currencies.py

	- name: Check for currencies.json changes
	run: \|
	if git diff --quiet -- backend/internal/core/currencies/currencies.json; then
	echo "changed=false" >> $GITHUB_ENV
	else
	echo "changed=true" >> $GITHUB_ENV
	fi

	- name: Create Pull Request
	if: env.changed == 'true'
	uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	branch: update-currencies
	base: main
	title: "Update currencies.json"
	commit-message: "chore: update currencies.json"
	path: .
	add-paths: \|
	backend/internal/core/currencies/currencies.json

	- name: No updates needed
	if: env.changed == 'false'
	run: echo "✅ currencies.json is already up-to-date"

Provide feedback