chore: Add Security Scan Workflow

.github/workflows/security-scan.yml

@@ -0,0 +1,33 @@
+name: Security Scan
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    branches:
+      - master
+
+jobs:
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changed files
+        id: changed-files
+        uses: tj-actions/changed-files@v46
+        with:
+          files: |
+            **/requirements.txt
+
+      - name: Run Vulnerability Scanner
+        if: steps.changed-files.outputs.any_changed == 'true'
+        uses: fylein/vulnerability-scan-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          is_submodule: true
+
+      - name: Skip Vulnerability Scanner
+        if: steps.changed-files.outputs.any_changed != 'true'
+        run: echo "No changes to dependency files, skipping vulnerability scan."