Possibly add pip-audit as an action

[ajax146]

pip-audit looks for vulnerabilites in pip packages. Overall, it would keep the project more secure.

https://github.com/pypa/pip-audit#github-actions https://github.com/marketplace/actions/gh-action-pip-audit

[ajax146]

Will need to do these two commands: pipfile2req Pipfile.lock -d > requirements.txt pip-audit -r requirements.txt

[ajax146]

Could also do it this way: https://github.com/pypa/gh-action-pip-audit#running-against-a-pipenv-project