ALA API MCP Server

name: Security Scanning on: push: branches: [main, master] pull_request: branches: [main, master] schedule: # Run every Monday at 9:00 AM UTC - cron: '0 9 * * 1' jobs: dependency-check: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - name: Set up Python uses: actions/setup-python@v5 with: python-version: "3.11" cache: 'pip' - name: Install dependencies run: | python -m pip install --upgrade pip pip install -e ".[dev]" pip install safety pip-audit - name: Run Safety check continue-on-error: true run: | safety check --json - name: Run pip-audit continue-on-error: true run: | pip-audit codeql: runs-on: ubuntu-latest permissions: actions: read contents: read security-events: write steps: - name: Checkout repository uses: actions/checkout@v4 - name: Initialize CodeQL uses: github/codeql-action/init@v3 with: languages: python queries: security-and-quality - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@v3 bandit: runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - name: Set up Python uses: actions/setup-python@v5 with: python-version: "3.11" - name: Install Bandit run: | pip install bandit[toml] - name: Run Bandit run: | bandit -r src -f json -o bandit-report.json - name: Upload Bandit report uses: actions/upload-artifact@v4 if: always() with: name: bandit-report path: bandit-report.json