simpilified and chnaged

Signed-off-by: Jürgen Eckel <juergen@riddleandcode.com>

.github/workflows/publish-docker.yml

@@ -3,18 +3,41 @@
 # SPDX-License-Identifier: (Apache-2.0 AND CC-BY-4.0)
 # Code is Apache-2.0 and docs are CC-BY-4.0
 
----
 name: publish-docker
-on:
+on: [workflow_dispatch,push]
-  workflow_dispatch:
 
 jobs:
-  publish-docker:
+  audit:
     runs-on: ubuntu-latest
+    
     steps:
-      # Get the repository's code
+      - name: Checkout repository
-      - name: Checkout
+        uses: actions/checkout@v3
-        uses: actions/checkout@v2
+
+      - name: Setup python
+        uses: actions/setup-python@v4
+        with:
+          python-version: 3.9
+
+      - name: Install pip-audit
+        run: pip install --upgrade pip pip-audit
+
+      - name: Install dependencies
+        run: pip install .
+
+      - name: Create requirements.txt
+        run: pip freeze > requirements.txt
+
+      - name: Audit dependencies
+        run: pip-audit
+
+
+#  publish-docker:
+#    runs-on: ubuntu-latest
+#    steps:
+#      # Get the repository's code
+#      - name: Checkout
+#        uses: actions/checkout@v2
       # https://github.com/docker/setup-qemu-action
       #- name: Set up QEMU
       #  uses: docker/setup-qemu-action@v1