Trimboli/dev - docs: add incident-to-campaign-intelligence how-to and tutorial #177

	name: Python Security

	on:
	pull_request:
	push:
	branches: [main]
	schedule:
	- cron: "23 4 * * 1" # Mondays at 04:23 UTC

	concurrency:
	group: python-security-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	bandit:
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- name: Check out code
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"

	- name: Install Bandit
	run: pip install bandit

	- name: Run Bandit
	run: bandit -r gnat/ -ll -x tests/

	pip-audit:
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- name: Check out code
	uses: actions/checkout@v4

	- name: Run pip-audit
	uses: pypa/gh-action-pip-audit@v1.1.0
	with:
	inputs: "."

Provide feedback