[StepSecurity] Apply security best practices #11

	name: python
	on: [push]

	permissions:
	contents: read

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- name: Harden the runner (Audit all outbound calls)
	uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
	with:
	egress-policy: audit

	- uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
	- name: Set up Python
	uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1
	with:
	python-version: '3.9'

	- name: Install dependencies
	run: python -m pip install --upgrade pip poetry

	- name: Install poetry
	run: poetry install

	- name: Run linter
	run: make lint

	- name: Run tests
	run: make tests

	- name: Upload coverage to Codecov
	uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6

Provide feedback