diff --git a/.github/workflows/bandit-action.yaml b/.github/workflows/bandit-action.yaml
index 6dde2ef..c49d956 100644
--- a/.github/workflows/bandit-action.yaml
+++ b/.github/workflows/bandit-action.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Bandit Test
-        uses: mdegis/bandit-action@v1
+        uses: mdegis/bandit-action@v1.0.1
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           path: "."
diff --git a/ci/setup/cloudrun/setup.sh b/ci/setup/cloudrun/setup.sh
new file mode 100644
index 0000000..d4ecf9b
--- /dev/null
+++ b/ci/setup/cloudrun/setup.sh
@@ -0,0 +1,8 @@
+# setup cloud run
+# Usage: setup.sh <project_id> <service_account_name> <workload_identity_pool_name> <github_repo> <artifact_registry_location>
+
+set -e
+PROJECT_ID=$1
+SERVICE_ACCOUNT_NAME=$2
+WORKLOAD_IDENTITY_POOL_NAME=$3
+GITHUB_REPO=$4
\ No newline at end of file