fix(ci): pin renovate checksum-update checkout to head sha #166

	name: Python Checks

	on:
	push:
	branches: [ main, development ]
	pull_request:
	branches: [ main, development ]
	schedule:
	- cron: '0 5 * * 0'
	workflow_dispatch:

	# Without this the workflow inherits whatever the repository default is.
	permissions: {}

	jobs:
	lint:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Set up Python
	uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
	with:
	python-version: '3.14'

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install flake8 bandit

	- name: Lint with flake8
	run: flake8 src/static/scripts/saxion-eduroam.py --max-line-length=120

	- name: Security scan with bandit
	run: bandit -r src/static/scripts/saxion-eduroam.py -ll

Navigation Menu