Add reusable security checks

Author: jpolec

.github/workflows/public-security.yml

@@ -0,0 +1,20 @@
+name: Public Repository Security
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "43 5 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  public-security:
+    uses: QuantJourneyOrg/.github/.github/workflows/public-python-security.yml@main
+    with:
+      python-version: "3.11"
+      install-command: python -m pip install -e '.[dev]'
+      test-command: pytest -q

.github/workflows/test.yml

@@ -15,10 +15,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -30,4 +30,3 @@ jobs:
       - name: Run tests with pytest
         run: |
           pytest -v tests/
-