- Scan the repository filesystem for CRITICAL and HIGH vulnerabilities and upload SARIF results to the GitHub Security tab - Run quarterly on a schedule, on manual dispatch, and on pushes and pull requests to the default branch Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>