Security (OSS-CLI) #228

Job	Run time
Gitleaks (secret scan)	12s
Trivy (filesystem + container scan)	16s
jscpd (duplication < 3% on touched code)	14s
SBOM (SPDX + CycloneDX)	17s
Semgrep (SAST)	20s
OSV-Scanner (SCA)	5s
	1m 24s

Provide feedback