Port bootstrap repository CI improvements #3

	# This workflow will install Python dependencies, run tests and lint with a variety of Python versions
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-python

	name: Bandit checks

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]
	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:

	jobs:
	bandit:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v3

	- name: Security check - Bandit
	uses: ioggstream/bandit-report-artifacts@v0.0.2
	with:
	project_path: .
	config_file: .bandit.yml

	# This is optional
	- name: Security check report artifacts
	uses: actions/upload-artifact@v1
	with:
	name: Security report
	path: output/security_report.txt

Provide feedback