ci: pin python-audit.yml to @main

[CybotTM]

Follow-up to #75. The reusable python-audit.yml workflow merged into netresearch/.github main, so drop the temporary @feat/python-audit-workflow pin.

Test plan

• YAML valid (python3 -c "import yaml; yaml.safe_load(...)")
• On-push CI: audit / pip-audit, audit / bandit, audit / CycloneDX SBOM all resolve python-audit.yml@main at the merge commit and pass.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/security.yml

Package	Version	License	Issue Type
netresearch/.github/.github/workflows/python-audit.yml	main	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
actions/netresearch/.github/.github/workflows/python-audit.yml	main	Unknown	Unknown

Scanned Files

• .github/workflows/security.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 66.78%. Comparing base (782ba0c) to head (4c3fc4b).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main      #76      +/-   ##
==========================================
- Coverage   66.87%   66.78%   -0.10%     
==========================================
  Files          21       21              
  Lines        3230     3230              
==========================================
- Hits         2160     2157       -3     
- Misses       1070     1073       +3     

Flag	Coverage Δ
unittests	66.78% <ø> (-0.10%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Updates the repository’s Security GitHub Actions workflow to consume the upstream reusable python-audit.yml workflow from netresearch/.github main branch now that the workflow has been merged upstream.

Changes:

• Switch .github/workflows/security.yml from python-audit.yml@feat/python-audit-workflow to python-audit.yml@main.
• Remove temporary inline comments related to the previous feature-branch pin.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

uses: ...@main references a mutable branch for a reusable workflow. For supply-chain safety and reproducibility, prefer pinning to an immutable ref (a release tag or a full commit SHA in netresearch/.github) and optionally keep it updated via Dependabot/renovate.

Suggested change

	uses: netresearch/.github/.github/workflows/python-audit.yml@main
	uses: netresearch/.github/.github/workflows/python-audit.yml@<FULL_40_CHAR_COMMIT_SHA>