Add automated deployment to HuggingFace after security checks

- Deploy automatically to HuggingFace Spaces after security scans pass
- Only deploys on push to main branch (not on PRs)
- Requires HF_TOKEN secret to be configured in GitHub repository settings

.github/workflows/security-check.yml

@@ -1,4 +1,4 @@
-name: Security Check
+name: Security Check and Deploy
 
 on:
   push:
@@ -99,3 +99,32 @@ jobs:
         echo "- Consider upgrading to transformers>=4.36.0" >> $GITHUB_STEP_SUMMARY
         echo "" >> $GITHUB_STEP_SUMMARY
         echo "Check the logs above for detailed findings." >> $GITHUB_STEP_SUMMARY
+  
+  deploy-to-huggingface:
+    runs-on: ubuntu-latest
+    needs: security-check
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+    
+    steps:
+    - uses: actions/checkout@v3
+      with:
+        fetch-depth: 0
+        lfs: true
+    
+    - name: Push to HuggingFace Space
+      env:
+        HF_TOKEN: ${{ secrets.HF_TOKEN }}
+      run: |
+        # Configure git
+        git config --global user.email "github-actions[bot]@users.noreply.github.com"
+        git config --global user.name "github-actions[bot]"
+        
+        # Add HuggingFace remote with authentication
+        git remote add huggingface https://visualisable-ai:$HF_TOKEN@huggingface.co/spaces/visualisable-ai/api
+        
+        # Push to HuggingFace
+        echo "Deploying to HuggingFace Spaces..."
+        git push huggingface main:main --force
+        
+        echo "✅ Deployed to HuggingFace Spaces successfully!" >> $GITHUB_STEP_SUMMARY
+        echo "🔗 View at: https://huggingface.co/spaces/visualisable-ai/api" >> $GITHUB_STEP_SUMMARY