name: "security scans"
on: push

jobs:
  scans:
    runs-on: smoke-test
    steps:
      uses: https://code.jakeyoungdev.com/actions/security@master #update this to a tag after first successful run