Add natural language pipeline builder with cron/stage generation #13

	name: Secure CI

	on:
	pull_request:
	branches: ["**"]
	push:
	branches: ["main", "master", "develop"]
	workflow_dispatch:

	permissions:
	contents: read

	concurrency:
	group: secure-ci-${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	frontend:
	name: Frontend checks
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Node.js
	uses: actions/setup-node@v4
	with:
	node-version: 20
	cache: npm

	- name: Install dependencies
	run: npm ci --ignore-scripts

	- name: Lint
	run: npm run lint

	- name: Build
	run: npm run build

	backend:
	name: Backend tests
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	contents: read
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Setup Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.12"
	cache: pip
	cache-dependency-path: backend/requirements.txt

	- name: Install dependencies
	run: \|
	python -m pip install --upgrade pip
	pip install -r backend/requirements.txt pytest

	- name: Run backend tests
	env:
	PYTHONPATH: .
	run: pytest -q backend/tests

	dependency-review:
	name: Dependency review
	if: github.event_name == 'pull_request'
	runs-on: ubuntu-latest
	timeout-minutes: 10
	permissions:
	contents: read
	pull-requests: read
	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Review dependencies
	uses: actions/dependency-review-action@v4
	with:
	fail-on-severity: high

Provide feedback