---
name: pip-audit
on:
  push:
    branches: [main]
  pull_request:
    branches: [main]
  schedule:
    - cron: '0 0 * * 0'  # Weekly on Sunday

# XXX need to do stuff with uv
jobs:
  build:
    runs-on: freebsd
    strategy:
      matrix:
        python-version: ["3.11"]
    steps:
      - uses: actions/checkout@v4
      - name: Check vulnerable components with pip-audit
        run: |
          pip-audit .