feat(tools): set up proper CI (#2)

### Explanation

_No response_

### Issue

_No response_

### Attestations

- [ ] I have read and agree to the [Code of Conduct](https://docs.nhcarrigan.com/community/coc/)
- [ ] I have read and agree to the [Community Guidelines](https://docs.nhcarrigan.com/community/guide/).
- [ ] My contribution complies with the [Contributor Covenant](https://docs.nhcarrigan.com/dev/covenant/).

### Dependencies

- [ ] I have pinned the dependencies to a specific patch version.

### Style

- [ ] I have run the linter and resolved any errors.
- [ ] My pull request uses an appropriate title, matching the conventional commit standards.
- [ ] My scope of feat/fix/chore/etc. correctly matches the nature of changes in my pull request.

### Tests

- [ ] My contribution adds new code, and I have added tests to cover it.
- [ ] My contribution modifies existing code, and I have updated the tests to reflect these changes.
- [ ] All new and existing tests pass locally with my changes.
- [ ] Code coverage remains at or above the configured threshold.

### Documentation

_No response_

### Versioning

_No response_

Reviewed-on: #2
Co-authored-by: Naomi Carrigan <commits@nhcarrigan.com>
Co-committed-by: Naomi Carrigan <commits@nhcarrigan.com>

.gitea/workflows/security.yml

@@ -2,11 +2,11 @@ name: Security Scan and Upload
 
 on:
   push:
-    branches: [ main ]
+    branches: [main]
   pull_request:
-    branches: [ main ]
+    branches: [main]
   schedule:
-    - cron: '0 0 * * 1'
+    - cron: "0 0 * * 1"
   workflow_dispatch:
 
 jobs:
@@ -24,18 +24,18 @@ jobs:
         env:
           DD_URL: ${{ secrets.DD_URL }}
           DD_TOKEN: ${{ secrets.DD_TOKEN }}
-          PRODUCT_NAME: ${{ github.repository }} 
-          PRODUCT_TYPE_ID: 1 
+          PRODUCT_NAME: ${{ github.repository }}
+          PRODUCT_TYPE_ID: 1
         run: |
           sudo apt-get install jq -y > /dev/null
-          
+
           echo "Checking connection to $DD_URL..."
-          
+
           # Check if product exists - capture HTTP code to debug connection issues
           RESPONSE=$(curl --write-out "%{http_code}" --silent --output /tmp/response.json \
             -H "Authorization: Token $DD_TOKEN" \
             "$DD_URL/api/v2/products/?name=$PRODUCT_NAME")
-          
+
           # If response is not 200, print error
           if [ "$RESPONSE" != "200" ]; then
             echo "::error::Failed to query DefectDojo. HTTP Code: $RESPONSE"
@@ -44,7 +44,7 @@ jobs:
           fi
 
           COUNT=$(cat /tmp/response.json | jq -r '.count')
-          
+
           if [ "$COUNT" = "0" ]; then
             echo "Creating product '$PRODUCT_NAME'..."
             curl -s -X POST "$DD_URL/api/v2/products/" \
@@ -75,7 +75,7 @@ jobs:
           echo "Uploading Trivy results..."
           # Generate today's date in YYYY-MM-DD format
           TODAY=$(date +%Y-%m-%d)
-          
+
           HTTP_CODE=$(curl --write-out "%{http_code}" --output response.txt --silent -X POST "$DD_URL/api/v2/import-scan/" \
             -H "Authorization: Token $DD_TOKEN" \
             -F "active=true" \
@@ -86,7 +86,7 @@ jobs:
             -F "scan_date=$TODAY" \
             -F "auto_create_context=true" \
             -F "file=@trivy-results.json")
-          
+
           if [[ "$HTTP_CODE" != "200" && "$HTTP_CODE" != "201" ]]; then
             echo "::error::Upload Failed with HTTP $HTTP_CODE"
             echo "--- SERVER RESPONSE ---"
@@ -154,7 +154,7 @@ jobs:
         run: |
           echo "Uploading Semgrep results..."
           TODAY=$(date +%Y-%m-%d)
-          
+
           HTTP_CODE=$(curl --write-out "%{http_code}" --output response.txt --silent -X POST "$DD_URL/api/v2/import-scan/" \
             -H "Authorization: Token $DD_TOKEN" \
             -F "active=true" \
@@ -174,4 +174,4 @@ jobs:
              exit 1
           else
              echo "Upload Success!"
-          fi
+          fi