deps(deps): bump open from 8.4.2 to 10.2.0 in the major-updates group #225

	name: OSV Scanner

	# Scans the repository for vulnerable dependencies using Google's OSV Scanner
	# Docs: https://google.github.io/osv-scanner/github-action/

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]
	schedule:
	- cron: '0 3 * * 1' # Every Monday at 03:00 UTC
	workflow_dispatch:

	permissions:
	actions: read # required by reusable workflow to checkout and run
	contents: read # minimal read access
	security-events: write # needed to upload SARIF to code scanning

	jobs:
	osv-scan:
	name: OSV Full Scan
	uses: google/osv-scanner-action/.github/workflows/[email protected]
	with:
	# Optional: override default scan arguments (defaults already recursive). Keep explicit for clarity.
	scan-args: \|-
	--recursive
	./
	upload-sarif: true
	fail-on-vuln: false
	permissions:
	actions: read
	contents: read
	security-events: write

Provide feedback