deps(deps): bump the dependency-updates group across 1 directory with 5 updates #293

	name: Security Scans

	"on":
	schedule:
	- cron: '0 2 * * 1'
	push:
	branches: [main]
	pull_request:
	branches: [main]
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	codeql:
	name: CodeQL Analysis
	runs-on: ubuntu-latest
	timeout-minutes: 15
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

	- name: Initialize CodeQL
	uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
	with:
	languages: python
	build-mode: none

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
	with:
	category: "/language:python"

	bandit:
	name: Bandit Security Scan
	runs-on: ubuntu-latest
	timeout-minutes: 10
	permissions:
	contents: read
	security-events: write
	steps:
	- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0

	- uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6
	with:
	python-version: "3.12"

	- name: Install Bandit
	run: pip install "bandit[toml,sarif]"

	- name: Run Bandit
	run: \|
	bandit -r src/ -f sarif -o bandit-results.sarif \|\| true
	bandit -r src/ -f txt \|\| true

	- name: Upload SARIF to GitHub Security
	uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
	if: always()
	with:
	sarif_file: bandit-results.sarif
	wait-for-processing: true

Provide feedback