deps(deps): bump the actions-updates group across 1 directory with 9 updates #292

	name: Security Scans

	"on":
	schedule:
	- cron: '0 2 * * 1'
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	codeql:
	name: CodeQL Analysis
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- name: Initialize CodeQL
	uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4
	with:
	languages: python
	build-mode: none

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4
	with:
	category: "/language:python"

	bandit:
	name: Bandit Security Scan
	runs-on: ubuntu-latest
	timeout-minutes: 10
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

	- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
	with:
	python-version: "3.12"

	- name: Install Bandit
	run: pip install "bandit[toml,sarif]"

	- name: Run Bandit
	run: \|
	bandit -r src/ -f sarif -o bandit-results.sarif \|\| true
	bandit -r src/ -f txt \|\| true

	- name: Upload SARIF to GitHub Security
	uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4
	if: always()
	with:
	sarif_file: bandit-results.sarif
	wait-for-processing: true

Provide feedback