Wire automated security scanning into CI so every pull request is scanned for vulnerable dependencies, committed secrets, and code weaknesses. Use when setting up or improving a project's security gates in GitHub Actions.
