Merge pull request #104 from MorpheusAIs/ryanleung-build

Fix CICD build and security check

.github/workflows/security_scan.yml

@@ -1,4 +1,7 @@
 name: Security Scan
+permissions:
+  security-events: write
+  contents: write
 
 on:
   push:
@@ -11,36 +14,30 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-
     - name: Set up Python
       uses: actions/setup-python@v4
       with:
         python-version: '3.x'
-
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install -r requirements.txt
         pip install safety bandit
-
     - name: Run Safety check
       run: safety check -r requirements.txt
       continue-on-error: true
-
     - name: Run Bandit
       run: bandit -r . -f custom
       continue-on-error: true
-
-    - name: Run Trivy vulnerability scanner in repo mode
+    - name: Run Trivy vulnerability scanner
       uses: aquasecurity/trivy-action@0.20.0
       with:
         scan-type: 'fs'
         ignore-unfixed: true
         format: 'sarif'
         output: 'trivy-results.sarif'
         severity: 'CRITICAL'
-
-    - name: Upload Trivy scan results to GitHub Security tab
+    - name: Upload Trivy scan results
       uses: github/codeql-action/upload-sarif@v3
       with:
-        sarif_file: 'trivy-results.sarif'
+        sarif_file: 'trivy-results.sarif'

.gitignore

@@ -56,3 +56,6 @@ resources/*
 ## installer
 MORagentsWindowsInstaller
 MORagentsWindowsInstaller.zip
+
+## app
+MORagents.app