Update main.yml #5

	name: CI

	# triggers pipeline when push is made to any branch (typical CI pipeline rule)
	on: [push]

	jobs:
	sast_scan:
	name: Run Bandit Scan
	runs-on: ubuntu-latest

	steps:
	- name: Checkout code
	uses: actions/checkout@v2

	- name: Set up Python
	uses: actions/setup-python@v2
	with:
	python-version: 3.8

	- name: Install Bandit
	run: pip install bandit

	- name: Run Bandit Scan
	#safe report in json format
	run: bandit -ll -ii -r . -f json -o bandit-report.json

	- name: Upload Artifact
	uses: actions/upload-artifact@v3
	#execute this step no matter of previous status
	if: always()
	with:
	#how artifacts will be named when exported
	name: bandit-findings.json
	path: bandit-report.json

Provide feedback