ci: bump osv-scanner version (#38)

Author: sdn4z

.github/workflows/security.yml

@@ -13,12 +13,12 @@ jobs:
     runs-on: ubuntu-latest
     if: "!startsWith(github.event.head_commit.message, 'bump:')"
     container:
-      image: ghcr.io/google/osv-scanner:v1.9.2
+      image: ghcr.io/google/osv-scanner:v2.1.0@sha256:9a1ba57d2a1506c9e9d0dfbeaf46346507e829745b70d47d77e12c38e66de8d7
     steps:
       - uses: actions/checkout@v4
       - name: Run OSV Scanner
         run: |
-          /osv-scanner --skip-git --format table -r .
+          /osv-scanner --format table -r .
   semgrep:
     runs-on: ubuntu-latest
     if: "!startsWith(github.event.head_commit.message, 'bump:')"

tests/test_cli.py

@@ -1,4 +1,4 @@
-from unittest.mock import Mock, call, patch
+from unittest.mock import ANY, Mock, call, patch
 
 from click.testing import CliRunner
 from lightman_ai import cli
@@ -35,7 +35,6 @@ def test_arguments(self, m_prompt: Mock, m_config: Mock, m_lightman: Mock, m_loa
 
         assert result.exit_code == 0
         assert m_lightman.call_count == 1
-        from unittest.mock import ANY
 
         assert m_lightman.call_args == call(
             agent="gemini",