sast

.github/workflows/bandit.yml

@@ -0,0 +1,24 @@
+name: Security check - Bandit
+
+on: push
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Security check - Bandit
+      uses: ioggstream/[email protected]
+      with:
+        project_path: src
+        ignore_failure: true
+
+    # This is optional
+    - name: Security check report artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: Security report
+        path: output/security_report.txt
+