security: add msgpack as direct dependency for security fix #699
security.yml
on: push
pip-audit (base/dev lockfile)
24s
bandit SAST
17s
Matrix: codeql
Matrix: optional-extra-pip-audit