security.yml

name: security

on:
  schedule:
    - cron: '0 5 1 * *'

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - name: Install Just
        uses: extractions/setup-just@v2
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Pulling Docker images
        run: just compose pull
      - name: Building Docker images
        run: just compose build
      - name: Maintain Composer cache
        uses: actions/cache@v4
        with:
          path: api/.cache/composer
          key: composer-${{ hashFiles('api/composer.lock') }}
          restore-keys: composer-
      - name: Maintain pnpm cache
        uses: actions/cache@v4
        with:
          path: app/.cache/node
          key: pnpm-${{ hashFiles('app/pnpm-lock.yaml') }}
          restore-keys: pnpm-
      - name: Install dependencies
        run: just install
      - name: Check security issues
        run: just test-security