safety.yml

name: safety
on:
  schedule:
    - cron: '0 1 * * *'

jobs:
  safety:
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: ['3.12', '3.11', '3.10', '3.9']
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
        with:
          python-version: ${{ matrix.python-version }}

      - name: Install and configure poetry
        run: |
          python -m pip install poetry
          python -m poetry config virtualenvs.create false

      - name: Prepare project for development
        run: python -m poetry install

      # NOTE: Ignore issue 70612 in all versions of Jinja2 (not affected)
      - name: Run safety dependency check
        run: python -m poetry run safety check --full-report -i 70612