From e5262b4b71f7ddc4523a9a453c898fc80b015f9a Mon Sep 17 00:00:00 2001
From: Pouzor <remy.jardinet@gmail.com>
Date: Sat, 7 Mar 2026 15:11:59 +0100
Subject: [PATCH] fix: replace safety scan with pip-audit (no login required)

safety scan requires interactive account login, breaking CI.
pip-audit provides equivalent vulnerability scanning without auth.
---
 .github/workflows/security.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 79e3a6c..965a963 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -32,5 +32,5 @@ jobs:
       - uses: actions/setup-python@v5
         with:
           python-version: '3.11'
-      - name: Safety scan
-        run: pip install safety && safety scan -r backend/requirements.txt
+      - name: Pip audit
+        run: pip install pip-audit && pip-audit -r backend/requirements.txt