From 8ffb20a0d7760027165d8a64ed1546fa763bd660 Mon Sep 17 00:00:00 2001
From: Georg Bauer <gb@rfc1437.de>
Date: Sun, 9 Aug 2026 15:51:32 +0200
Subject: [PATCH] Add weekly OSV dependency audit

---
 .gitea/workflows/dependency-audit.yml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 .gitea/workflows/dependency-audit.yml

diff --git a/.gitea/workflows/dependency-audit.yml b/.gitea/workflows/dependency-audit.yml
new file mode 100644
index 0000000..272178f
--- /dev/null
+++ b/.gitea/workflows/dependency-audit.yml
@@ -0,0 +1,21 @@
+name: Weekly OSV dependency audit
+
+on:
+  schedule:
+    # Runs every Monday. Change the minute to stagger repositories.
+    - cron: "17 3 * * 1"
+  workflow_dispatch:
+
+jobs:
+  dependency-audit:
+    runs-on: linux-arm64
+    timeout-minutes: 20
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Scan dependencies for known vulnerabilities
+        uses: docker://ghcr.io/google/osv-scanner:v2
+        with:
+          args: scan source --recursive .