Merge pull request #1 from bellyliu/main

fix: Update bandit output format to SARIF and install necessary formatter

Author: zeroc0d3

.github/workflows/ci.yml

@@ -271,7 +271,7 @@ jobs:
         uses: github/codeql-action/upload-sarif@v4
         if: always()
         with:
-          sarif_file: bandit-results.json
+          sarif_file: bandit-results.sarif
         continue-on-error: true
 
   # ===========================================================================

Makefile

@@ -273,8 +273,8 @@ ci-build: clean ## Build package for CI
 .PHONY: ci-security
 ci-security: ## Run security scan for CI
 	@echo "Running security scan (CI mode)..."
-	@$(PIP) install bandit safety 2>/dev/null || true
-	@bandit -r $(SRC_DIR)/ -f json -o bandit-results.json -ll || true
+	@$(PIP) install bandit bandit-sarif-formatter safety 2>/dev/null || true
+	@bandit -r $(SRC_DIR)/ --format sarif --output bandit-results.sarif -ll || true
 	@safety check --json > safety-results.json 2>/dev/null || true
 	@echo "Security scan complete"