CI: add pip-audit security scanning

Author: dannywillems

.github/workflows/actions.yml

@@ -11,8 +11,8 @@ jobs:
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install poetry
@@ -25,3 +25,6 @@ jobs:
         run: poetry run pytest tests
       - name: Run black
         run: poetry run black leakix/*.py tests/*.py example/*.py --check
+      - name: Security audit
+        if: matrix.python-version != '3.7'
+        run: poetry run pip-audit

pyproject.toml

@@ -17,6 +17,7 @@ black = "*"
 mypy = "*"
 requests-mock = "*"
 pylint = "*"
+pip-audit = "*"
 
 [build-system]
 requires = ["poetry-core>=1.0.0"]