feat: add bandit security scan #2

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	quality:
	name: Code Quality
	runs-on: ubuntu-latest

	steps:
	- name: Checkout
	uses: actions/checkout@v4

	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: "3.10"

	- name: Install dependencies
	run: pip install ruff mypy pytest pytest-cov bandit

	- name: Ruff lint
	run: ruff check .

	- name: Ruff format check
	run: ruff format --check .

	- name: mypy
	run: mypy src/

	- name: pytest
	run: pytest --cov=src --cov-fail-under=80

	- name: Bandit 安全掃描
	run: bandit -r src/ -ll

Provide feedback