name: Security

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.11'
      - name: Install security tools
        run: |
          pip install bandit safety
      - name: Run bandit
        run: |
          bandit -r shellgen/
      - name: Run safety
        run: |
          safety check -r requirements.txt