Adding dependency vulnerability scanning to the CI process (#345)

Adding dependency scanning for CI

Co-authored-by: dvora-h <[email protected]>

Author: chayim

.github/workflows/ci.yml

@@ -14,9 +14,31 @@ on:
   schedule:
     - cron: '0 6 * * *'  # Daily 6AM UTC build
 
+env:
+  pythonversion: 3.9
+
 
 jobs:
 
+  dependency-audit:
+    name: Dependency audit
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - name: install python
+        uses: actions/[email protected]
+        with:
+          python-version: ${{env.pythonversion}}
+      - name: create local poetry install
+        run: |
+            python -m venv .venv
+            source .venv/bin/activate
+            python -m pip install poetry
+            poetry install
+      - uses: trailofbits/[email protected]
+        with:
+          virtual-environment: .venv
+
   lint:
     name: Linter
     runs-on: ubuntu-latest
@@ -27,7 +49,7 @@ jobs:
       - name: Setup Python 3.9
         uses: actions/[email protected]
         with:
-          python-version: 3.9
+          python-version: ${{env.pythonversion}}
         #----------------------------------------------
         #  -----  install & configure poetry  -----
         #----------------------------------------------