[Security] Security issue in your GitHub CI workflow YAML files

Hello maintainers,

I would like to report a potential vulnerability in your GitHub CI workflows.

Affected files:
- aayushxrj/ai-sast-dast-pipeline-ci-cd/.github/workflows/dev-sast-pipeline.yml

Vulnerability:
- In job 'sast', steps 'Run Bandit on changed files (excluding tests/)' and 'Run Semgrep on changed files (excluding tests/)', the list of changed files from an attacker-controlled PR is spliced directly into the run shell via `${{ steps.changed-files.outputs.files }}', allowing command injection through malicious filenames.

Thank you for your time and for maintaining this project.