ci: enable security checks on push

[mramotowski]

📝 Description

• Provide a clear summary of the changes and the issue that has been addressed.
• 🛠️ Fixes # (issue number)

✨ Changes

Select what type of change your PR is:

• 🚀 New feature (non-breaking change which adds functionality)
• 🐞 Bug fix (non-breaking change which fixes an issue)
• 🔄 Refactor (non-breaking change which refactors the code base)
• ⚡ Performance improvements
• 🎨 Style changes (code style/formatting)
• 🧪 Tests (adding/modifying tests)
• 📚 Documentation update
• 📦 Build system changes
• 🚧 CI/CD configuration
• 🔧 Chore (general maintenance)
• 🔒 Security update
• 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)

✅ Checklist

Before you submit your pull request, please make sure you have completed the following steps:

• 📚 I have made the necessary updates to the documentation (if applicable).
• 🧪 I have written tests that support my changes and prove that my fix is effective or my feature works (if applicable).
• 🏷️ My PR title follows conventional commit format.

For more information about code review checklists, see the Code Review Checklist.

[Copilot]

Pull request overview

This PR enables security checks to run on pull requests in addition to scheduled runs, likely for testing purposes. The changes include adding a pull_request trigger and modifying the scan configuration to always use full scan settings regardless of trigger type.

Key Changes:

• Added pull_request trigger to enable security scans on PRs (marked as temporary for testing)
• Modified scan parameters to always use comprehensive settings instead of conditional logic

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The temporary testing comments should be removed before merging to main. Consider using a feature branch or draft PR status instead of leaving TODO comments in the codebase.

Suggested change

	#DELETE AFTER TESTING
	pull_request:
	#DELETE AFTER TESTING

[Copilot]

The logical OR operator in GitHub Actions expressions doesn't work as intended here. A non-empty string is always truthy, so inputs.tools will never be used. The original conditional logic github.event_name == 'schedule' && 'value' || inputs.value should be restored or replaced with proper conditional logic that accounts for the new pull_request trigger.

Suggested change

	tools: ${{ 'bandit,clamav,semgrep,trivy,zizmor' || inputs.tools }}
	scan-scope: ${{ 'all' || inputs.scan-scope }}
	severity-level: ${{ 'LOW' || inputs.severity-level }}
	confidence-level: ${{ 'LOW' || inputs.confidence-level }}
	tools: ${{ github.event_name == 'schedule' && 'bandit,clamav,semgrep,trivy,zizmor' || inputs.tools }}
	scan-scope: ${{ github.event_name == 'schedule' && 'all' || inputs['scan-scope'] }}
	severity-level: ${{ github.event_name == 'schedule' && 'LOW' || inputs['severity-level'] }}
	confidence-level: ${{ github.event_name == 'schedule' && 'LOW' || inputs['confidence-level'] }}

[AlexanderBarabanov]

@mramotowski - could you take a look?

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[AlexanderBarabanov]

Thank you! Could you trigger scans on PR https://github.com/open-edge-platform/anomalib/pull/3151/checks?

[mramotowski]

Thank you! Could you trigger scans on PR https://github.com/open-edge-platform/anomalib/pull/3151/checks?

https://github.com/open-edge-platform/anomalib/actions/runs/19728403225/job/56524094782?pr=3151

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The comment '# Default set' is on line 65, but line 67 shows the actual default is 'bandit,clamav,semgrep,trivy,zizmor'. The comment should be moved to match the default value on line 67 or the comment on line 65 should be removed to avoid confusion.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!