name: Scan for Python Vulnerabilities

on:
  workflow_call:

jobs:
  bandit-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Setup
        uses: ./.github/actions/python
      - uses: ./.github/actions/bandit-scan/
        with:
          input-dir: '.'
          format: 'json'
          bandit-config: 'bandit.yaml'
          output-file: 'bandit-report.json'
      - name: Upload Bandit Report
        uses: actions/upload-artifact@v3
        with:
          name: bandit-artifact
          path: |
            bandit-report.json