Add pip-audit github check

.github/workflows/checks.yml

@@ -66,9 +66,27 @@ jobs:
         SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
     # - name: Run style checks
     #   run: flake8 .
-    # - name: Check imports alphabetized
-    #   run: isort --check-only ./app ./tests
+    - name: Check imports alphabetized
+      run: isort --check-only ./app ./tests
     - name: Run tests
       run: pytest -n4 --maxfail=10
       env:
         SQLALCHEMY_DATABASE_TEST_URI: postgresql://user:password@localhost:5432/test_notification_api
+
+  pip-audit:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install container dependencies
+        run: |
+          sudo apt-get update \
+          && sudo apt-get install -y --no-install-recommends \
+          libcurl4-openssl-dev
+      - uses: actions/checkout@v3
+      - name: Set up Python 3.9
+        uses: actions/setup-python@v3
+        with:
+          python-version: "3.9"
+      - uses: trailofbits/gh-action-pip-audit@v1.0.0
+        with:
+          inputs: requirements.txt requirements_for_test.txt
+          ignore-vulns: PYSEC-2022-237