Add python and npm audits to checks.yml

.github/workflows/checks.yml

@@ -29,20 +29,9 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
-
     steps:
-    - name: Install container dependencies
-      run: |
-        sudo apt-get update \
-        && sudo apt-get install -y --no-install-recommends \
-        libcurl4-openssl-dev
     - uses: actions/checkout@v3
-    - name: Set up Python 3.9
-      uses: actions/setup-python@v3
-      with:
-        python-version: "3.9"
-    - name: Install application dependencies
-      run: make bootstrap
+    - uses: ./.github/actions/setup-project
     - name: Run style checks
       run: flake8 .
     - name: Check imports alphabetized
@@ -51,3 +40,15 @@ jobs:
       run: npm test
     - name: Run py tests
       run: pytest -n4 --maxfail=10
+
+  dependency-audits:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    - uses: ./.github/actions/setup-project
+    - uses: trailofbits/gh-action-pip-audit@v1.0.0
+      with:
+        inputs: requirements.txt requirements_for_test.txt
+        ignore-vulns: PYSEC-2022-237
+    - name: Run npm audit
+      run: make npm-audit