Improve GH action triggers for dependency checks

.github/workflows/ancient.yml

@@ -0,0 +1,24 @@
+name: Check deps for freshness
+
+on:
+  schedule:
+    - cron: '0 1 1 * 1' # every first of the month
+  pull_request:
+    types: [opened, reopened]
+
+jobs:
+  deps:
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Cache lein project dependencies
+      uses: actions/cache@v4
+      with:
+        path: "~/.m2/repository"
+        key: "${{ runner.os }}-clojure-${{ hashFiles('**/project.clj') }}"
+
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Check dependency freshness
+      run: lein check-deps

.github/workflows/build.yml → .github/workflows/docker.yml

@@ -1,4 +1,4 @@
-name: Build docker image
+name: Build and publish docker image
 
 on:
   push:

.github/workflows/nvd.yml

@@ -0,0 +1,29 @@
+name: Check deps for vulnerabilities
+
+on:
+  push:
+    branches: ["*"]
+    tags: ["*"]
+  schedule:
+    - cron: '0 1 * * 1,2,3,4,5' # every workday
+
+jobs:
+  deps:
+    runs-on: ubuntu-latest
+
+    env:
+      NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
+
+    steps:
+
+    - name: Checkout code
+      uses: actions/checkout@v4
+
+    - name: Cache lein project dependencies
+      uses: actions/cache@v4
+      with:
+        path: "~/.m2/repository"
+        key: "${{ runner.os }}-clojure-${{ hashFiles('**/project.clj') }}"
+
+    - name: NVD clojure
+      uses: jomco/nvd-clojure-action@v3

.github/workflows/test.yml

@@ -1,24 +1,8 @@
-name: Run tests
+name: Run checks, tests and docker build
+
 on: push
 
 jobs:
-  deps:
-    runs-on: ubuntu-latest
-
-    env:
-      NVD_API_TOKEN: ${{ secrets.NVD_API_TOKEN }}
-
-    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/cache@v4
-      with: { path: "~/.m2", key: "${{ runner.os }}-m2" }
-
-    - name: Check dependency freshness
-      run: lein check-deps
-
-    - name: NVD clojure
-      uses: jomco/nvd-clojure-action@v3
-
   lint:
     runs-on: ubuntu-latest