From c5e90d20f70b3239d1012143f4a050a9c4a0107f Mon Sep 17 00:00:00 2001
From: Martin Zibricky <mzibrick@redhat.com>
Date: Tue, 26 Aug 2025 15:15:25 +0200
Subject: [PATCH] LCORE-595: Fix bandit GH actions - use GH actions from PyQCA

---
 .github/workflows/bandit.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/bandit.yaml b/.github/workflows/bandit.yaml
index d1c76230..ef9b18d6 100644
--- a/.github/workflows/bandit.yaml
+++ b/.github/workflows/bandit.yaml
@@ -8,10 +8,11 @@ jobs:
   bandit:
     runs-on: ubuntu-latest
     permissions:
+      security-events: write
+      actions: read
       contents: read
       pull-requests: read
     steps:
-      - uses: mdegis/bandit-action@v1.0
+      - uses: PyCQA/bandit-action@v1
         with:
-          path: "src"
-          exit_zero: true
+          targets: "src"