on: push: jobs: sast: runs-on: runner-latest steps: - uses: actions/checkout@v4 - run: pipx run pre-commit run -a