Security (OSS-CLI) #287

Job	Run time
Gitleaks (secret scan)	9s
jscpd (duplication < 3% on touched code)	17s
OSV-Scanner (SCA)	10s
Trivy (filesystem + container scan)	22s
SBOM (SPDX + CycloneDX)	24s
Semgrep (SAST)	25s
	1m 47s

Provide feedback