name: Security                                                               
                                                                                
   on:                                                                          
   pull_request:                                                                
   push:                                                                        
   branches: [master]                                                           
                                                                                
   jobs:                                                                        
   security-checks:                                                             
   runs-on: ubuntu-latest                                                       
   steps:                                                                       
   - uses: actions/checkout@v4                                                  
   - uses: actions/setup-node@v4                                                
   with:                                                                        
   node-version: 22                                                             
   cache: npm                                                                   
   - run: npm ci                                                                
   - run: npm audit --audit-level=high                                          
   - uses: gitleaks/gitleaks-action@v2                                          
   env:                                                                         
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}