fix(ci): explicitly pass uv.lock to OSV-Scanner

[alain-sv]

No description provided.

[qodo-code-review]

Review Summary by Qodo

Add explicit UV lock file argument to OSV-Scanner workflows

🐞 Bug fix

Walkthroughs

Description

• Explicitly pass uv.lock to OSV-Scanner in security workflows
• Add --lockfile=uv.lock argument to both scheduled and PR scan jobs
• Ensures OSV-Scanner correctly identifies and scans UV lock file dependencies

Diagram

flowchart LR
  A["OSV-Scanner Action"] -->|"scan-args"| B["--lockfile=uv.lock"]
  B -->|"scans"| C["uv.lock"]
  C -->|"identifies"| D["Dependencies"]

Loading

File Changes

1. .github/workflows/security-scan.yml ⚙️ Configuration changes +2/-0

Add explicit UV lock file argument to OSV-Scanner

• Added --lockfile=uv.lock argument to the scan-scheduled job's scan-args
• Added --lockfile=uv.lock argument to the scan-pr job's scan-args
• Ensures OSV-Scanner explicitly processes the UV lock file for dependency scanning

.github/workflows/security-scan.yml

---

ⓘ You are approaching your monthly quota for Qodo. Upgrade your plan

[qodo-code-review]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

ⓘ You are approaching your monthly quota for Qodo. Upgrade your plan