A GitHub Action that runs bandit (static code analysis) and pip-audit (dependency vulnerability scanning) on a Python repository, then puts the results in one PR comment, the workflow step summary, and a downloadable artifact. - View it on GitHub