Add setup skill and restructure README deploy docs (#3) #6

	name: Security

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	permissions:
	contents: read

	jobs:
	gitleaks:
	name: Secret scan (gitleaks)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Install gitleaks
	run: \|
	curl -sSL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_$(curl -s https://api.github.com/repos/gitleaks/gitleaks/releases/latest \| grep '"tag_name"' \| cut -d'"' -f4 \| tr -d 'v')_linux_x64.tar.gz \| tar -xz -C /usr/local/bin gitleaks

	- name: Run gitleaks
	run: gitleaks detect --source . --redact -v

	pip-audit:
	name: Dependency audit (pip-audit)
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-python@v5
	with:
	python-version: "3.11"

	- name: Install pip-audit
	run: pip install pip-audit

	- name: Audit dependencies
	run: pip-audit -r requirements.txt

Navigation Menu