Repository navigation

feat(annotations): support the native WSI viewer #50

	name: Security checks

	on:
	pull_request:
	workflow_dispatch:
	schedule:
	- cron: "0 9 * * 1"

	permissions:
	contents: read

	jobs:
	security:
	runs-on: ubuntu-latest
	steps:
	- name: Check out source
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Python
	uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
	with:
	python-version: "3.13"

	- name: Install uv
	run: python -m pip install --disable-pip-version-check "uv==0.8.22"

	- name: Install locked development environment
	run: uv sync --dev --frozen

	- name: Run tests
	run: uv run pytest

	- name: Audit locked dependencies
	shell: bash
	run: \|
	set -euo pipefail
	uv export --all-groups --no-emit-project --format requirements-txt \
	> "$RUNNER_TEMP/requirements-audit.txt"
	uv run pip-audit \
	--requirement "$RUNNER_TEMP/requirements-audit.txt" \
	--strict --no-deps --disable-pip --progress-spinner off