Security (OSS-CLI) #122

Job	Run time
Semgrep (SAST)	24s
SBOM (SPDX + CycloneDX)	23s
Gitleaks (secret scan)	9s
Trivy (filesystem + container scan)	11s
jscpd (duplication < 3% on touched code)	16s
OSV-Scanner (SCA)	5s
	1m 28s

Provide feedback