Update owasp.yml

[lperry022]

I’ve updated the workflow trigger to pull_request_target so that the GitHub Actions bot has the correct permissions to post scanner results back to the PR.

With pull_request, the workflow runs in the context of the contributor’s fork, which restricts the default GITHUB_TOKEN to read-only. That’s why our OWASP scanner step was failing with a 403 error when trying to create comments.

Using pull_request_target makes the workflow execute in the base repo context, giving it issues: write and pull-requests: write permissions so it can safely create or update comments on the PR.

[github-actions]

🔒 Security Scan Results

🔒 Security Scan Results
=========================

Bandit Scan Results:
-------------------
Run started:2025-09-24 05:03:33.649949

Test results:
	No issues identified.

Code scanned:
	Total lines of code: 1980
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 1

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 13
		Medium: 0
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 0
		Medium: 0
		High: 13
Files skipped (1):
	./T1_2025/infra/backups/bak/controller/backend/v1.0.0/endpoints/register.py (syntax error while parsing AST from file)

✅ No critical security issues detected.

The code has passed all critical security checks.

[ben-AI-cybersec]

👌