diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index e0b92e6..4496e09 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -68,11 +68,14 @@ jobs: - uses: actions/setup-python@v5 with: python-version: "3.12" - - name: Check Python dependencies for security issues + cache: pip + - name: Install pip-audit and check dependencies run: | pip install --upgrade pip - pip install -r apps/api/requirements.txt - pip audit --requirement apps/api/requirements.txt || true + pip install pip-audit + pip-audit --requirement apps/api/requirements-lock.txt + # Also check dev dependencies + pip-audit --requirement apps/api/requirements-dev-lock.txt compose-e2e: runs-on: ubuntu-latest