Add vulnerability scanning for unpinned dependencies

.github/workflows/scanning.yaml

@@ -3,7 +3,18 @@ name: 'Vulnerabilities scanning'
 on:
   push:
 
+env:
+  DEP_PATH: requirements.txt
+
 jobs:
   scan:
-    name: Vulnerabilities scan
-    uses: th2-net/.github/.github/workflows/python-scan.yml@main
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out master
+        uses: actions/checkout@master
+      - name: Security vulnerabilities scan
+        continue-on-error: false
+        uses: aufdenpunkt/python-safety-check@master
+        with:
+          scan_requirements_file_only: 'true'
+          safety_args: '--policy-file .safety-policy.yaml'

.safety-policy.yaml

@@ -0,0 +1,3 @@
+security:
+  ignore-unpinned-requirements: False
+  continue-on-vulnerability-error: False