Separate security scanned lockfile #1948

	name: Continuous Integration

	on:
	pull_request:
	schedule:
	- cron: "0 0 * * *"

	jobs:
	test:
	runs-on: ${{ matrix.platform }}

	strategy:
	matrix:
	platform: [ ubuntu-latest, macos-latest, windows-latest ]
	python-version: [ '3.9', '3.10', '3.11', '3.12' ]

	steps:
	- uses: actions/checkout@v4
	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	python -m pip install -e ".[dev]"
	python -m pip install tox-gh-actions==2.12.0
	- name: Run tests
	run: tox
	test_docs:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.12'
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	python -m pip install -e ".[dev, docs]"
	sudo apt-get install graphviz
	- name: Test if docs can be built
	run: tox -e docs

	test_requirements_lock:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.11"
	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	python -m pip install -e ".[dev]"
	- name: Regenerate requirements.txt
	run: tox -e pip-compile
	- name: Check lockfile is up-to-date
	run: git diff --exit-code HEAD requirements.txt

Provide feedback