🌱 Bump github.com/sashabaranov/go-openai from 1.38.0 to 1.40.2 #264

	name: Docker Image Scan

	on:
	pull_request:
	branches: [ main ]

	jobs:
	scan:
	name: Build and Scan
	runs-on: ubuntu-latest
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	steps:
	- name: Notify on failure
	if: failure()
	uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
	with:
	script: \|
	github.rest.issues.createComment({
	issue_number: context.issue.number,
	owner: context.repo.owner,
	repo: context.repo.repo,
	body: '❌ Container security scan failed. Please check the workflow logs.'
	})

	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0

	- name: Build local container
	uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
	with:
	tags: localbuild/testimage:latest
	push: false
	load: true

	- name: Scan image
	uses: anchore/scan-action@7c05671ae9be166aeb155bad2d7df9121823df32 # v6.1.0
	with:
	image: "localbuild/testimage:latest"
	fail-build: true
	severity-cutoff: high

Provide feedback