test for ci, don't merge

.github/dependabot.yml

@@ -0,0 +1,11 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  - package-ecosystem: "" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "daily"

.github/workflows/Bandit-Scan.yaml

@@ -0,0 +1,41 @@
+name: Scanner-Bandit
+on:
+  pull_request:
+    branches:
+      - '**'
+  workflow_dispatch:
+    inputs:
+      repos:
+        description: 'Enter Project repo for which you want to run Bandit scan:'
+        required: true
+        type: string
+        default: '1pikachu/intel-extension-for-deepspeed'
+      refs:
+        description: 'Enter Project branch, tag:'
+        required: true
+        type: string
+        default: 'main'
+      excludes:
+        description: 'Enter target repository folders to be excluded eg. tools,xyz etc:'
+        required: false
+        type: string
+      config_file:
+        description: 'Enter target repository configuration file for Bandit scan eg. .bandit.yml:'
+        required: false
+        type: string
+        default: 'bandit.yml'
+        # runner_label:
+        #   description: 'Enter one label of the runner that will execute the workflow:'
+        #   required: true
+        #   type: string
+        #   default: "['gasp']"
+jobs:
+  scan-bandit:
+    uses: 'intel-innersource/frameworks.ai.infrastructure.code-scan-tools/.github/workflows/Scanner_Bandit.yml@one-ci-cd'
+    with:
+      repos: 'intel-extension-for-deepspeed'  # ${{ github.event.inputs.repos }}
+      refs: ${{ github.event.inputs.refs }}
+      # config_file: ${{ github.event.inputs.config_file }}
+      runners: "['gasp']"  # ${{ github.event.inputs.runner_label }}
+    secrets:
+      token: ${{ secrets.GITHUB_TOKEN }}