ci(security): general improvements

[jorgepiloto]

Fix #607 by enabling the security reports now that the project is public. It also uses SHA for tracking actions versions. Finally, an actions-style job runs zizmor to check for potential issues in the actions.

[duposyl]

LGTM! Thanks!

[jorgepiloto]

Checking locally why this is failing. It is strange because we were running these and no issues were raised before.

[jorgepiloto]

Following the instructions from the vulnerability actions and after running this locally, no errors were found by bandit or safety.

[jorgepiloto]

I am suspecting about some permissions to access the security issues.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.70%. Comparing base (835b5e7) to head (c529991).
⚠️ Report is 133 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #802      +/-   ##
==========================================
- Coverage   89.70%   89.70%   -0.01%     
==========================================
  Files          67       67              
  Lines      188022   188022              
  Branches     1339     1339              
==========================================
- Hits       168664   168662       -2     
- Misses      18965    18967       +2     
  Partials      393      393              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[duposyl]

LGTM! Thanks for improving this!