Merge pull request #1094 from adamvangrover/adam-daily-market-brief-2… #865

	name: CI / Security
	on:
	push:
	branches: [ main, master ]
	pull_request:
	branches: [ main, master ]
	schedule:
	- cron: '0 0 * * 0'
	jobs:
	python-security:
	runs-on: ubuntu-latest
	strategy:
	matrix:
	python-version: ["3.10", "3.11", "3.12"]
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Set up Python ${{ matrix.python-version }}
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	cache: 'pip'
	- name: Install Bandit
	run: \|
	python -m pip install --upgrade pip
	pip install bandit
	- name: Run Bandit (Python Security)
	run: bandit -r core services scripts -ll -x tests
	rust-security:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Install Rust
	uses: dtolnay/rust-toolchain@stable
	- name: Install cargo-audit
	run: cargo install cargo-audit
	- name: Run Cargo Audit
	run: cargo audit --file core/experimental/adamos_kernel/Cargo.lock \|\| echo "Cargo.lock might be missing or audit failed, proceeding for now"
	frontend-security:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4
	- name: Set up Node.js
	uses: actions/setup-node@v4
	with:
	node-version: '20'
	cache: 'npm'
	cache-dependency-path: services/webapp/client/package-lock.json
	- name: Run NPM Audit
	working-directory: services/webapp/client
	run: npm audit --audit-level=high \|\| echo "NPM audit found issues"

Navigation Menu