name: Audit

on: [push, pull_request]

permissions:
  contents: read # to fetch code (actions/checkout)

jobs:
  audit:
    name: Audit dependencies
    runs-on: ubuntu-latest

    steps:
    - name: Checkout Commit
      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - name: Install pnpm
      uses: pnpm/setup@b1cac37306e39c21283b9dd6cb0ac288fb35ba6b
      with:
        install: false
    - name: Audit
      run: pn audit