Bandit Scan as part of PR and precommit workflow #2821

	# This workflow will install Python dependencies, run tests and lint with a single version of Python
	# For more information see: https://help.github.com/actions/language-and-framework-guides/using-python-with-github-actions

	name: TaskRunner

	on:
	pull_request:
	types: [opened, synchronize, reopened, ready_for_review]

	permissions:
	contents: read

	env:
	# A workaround for long FQDN names provided by GitHub actions.
	FQDN: "localhost"

	jobs:
	build:
	if: github.event.pull_request.draft == false
	runs-on: ubuntu-latest
	timeout-minutes: 30

	steps:
	- uses: actions/checkout@v3
	- name: Set up Python
	uses: actions/setup-python@v4
	with:
	python-version: "3.10"
	- name: Install dependencies ubuntu
	run: \|
	python -m pip install --upgrade pip
	pip install .
	- name: Task Runner API
	run: \|
	python -m tests.github.test_hello_federation --template torch_cnn_mnist --fed_workspace aggregator --col1 collaborator1 --col2 collaborator2 --rounds-to-train 3 --save-model output_model

Provide feedback