audit_action.yml

# This is a basic workflow to help you get started with Actions

name: CI

# Controls when the workflow will run
on:
  # runs midnight every Monday
  schedule:
    - cron: '0 0 * * 1'

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:

# A workflow run is made up of one or more jobs that can run sequentially or in parallel
jobs:
  # This workflow contains a single job called "build"
  build:
    # The type of runner that the job will run on
    runs-on: ubuntu-latest

    # Steps represent a sequence of tasks that will be executed as part of the job
    steps:
      # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
      - uses: actions/checkout@v4

      # Install Updraft CLI and Run Audit.py
      - name: audit
        run: |
          echo "//registry.npmjs.org/:_authToken=${{ secrets.UPDRAFT_BOT_NPM_TOKEN }}" > ~/.npmrc
          npm i @cyfrin/updraft-cli@2.0.9
          python audit.py