name: Security Audit Toolbox Update

on:
  schedule:
    - cron: "17 1 * * 6"
  workflow_dispatch:

jobs:
  toolbox-update:
    runs-on: ubuntu-latest
    env:
      SECURITY_AUDIT_UPDATE: "1"
      SECURITY_AUDIT_REQUIRE_TOOLS: "1"
    steps:
      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
        with:
          path: govoplan
      - name: Refresh audit toolbox image
        working-directory: govoplan
        run: tools/checks/security-audit/run.sh --mode quick --scope current --build-only