Add Semgrep SAST instead of Bandit
issue