ci: add PR and scheduled OSV scans

.github/workflows/osv-scanner-pr.yml

@@ -0,0 +1,18 @@
+name: OSV-Scanner PR Scan
+
+on:
+  pull_request:
+    branches:
+      - main
+  merge_group:
+    branches:
+      - main
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  scan-pr:
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@v2.7.0

.github/workflows/osv-scanner-scheduled.yml

@@ -0,0 +1,15 @@
+name: OSV-Scanner Scheduled Scan
+
+on:
+  schedule:
+    - cron: "30 12 * * 1"
+  workflow_dispatch:
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  scan-scheduled:
+    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.7.0

.github/workflows/security.yml

@@ -62,12 +62,4 @@ jobs:
         run: pip install pip-audit==2.10.1
 
       - name: Run pip-audit
-        run: pip-audit -r requirements.txt
-
-  osv-scanner:
-    name: Dependency Scan (OSV)
-    permissions:
-      contents: read
-      actions: read
-      security-events: write
-    uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc # v2.6.0
+        run: pip-audit -r requirements.txt