From b810edb80a43e87b6ff8d13223cd7bab90dcb17a Mon Sep 17 00:00:00 2001
From: Adrian Vladu <avladu@cloudbasesolutions.com>
Date: Thu, 18 Dec 2025 11:19:17 +0200
Subject: [PATCH] github_actions: add pip-audit check

Change-Id: I4fb7ce29ab65e93091d39267b6f420e33e7a6fba
---
 .github/workflows/cloudbase_init_tests.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/cloudbase_init_tests.yml b/.github/workflows/cloudbase_init_tests.yml
index 578928d1..532d2157 100644
--- a/.github/workflows/cloudbase_init_tests.yml
+++ b/.github/workflows/cloudbase_init_tests.yml
@@ -98,3 +98,11 @@ jobs:
             exit 1
         }
         Invoke-Pester test-resources/functional-tests -Output Detailed -FullNameFilter TestVerifyAfterAllPlugins
+    - name: Audit Cloudbase-Init pip packages
+      shell: powershell
+      run: |
+        python -W ignore -m pip install pip-audit
+        pip-audit.exe
+        if ($LASTEXITCODE) {
+            exit 1
+        }