Adding dependency vulnerability scanning to the CI process

[chayim]

Pull Request check-list

Please make sure to review and check all of these items:

• Does $ tox pass with this change (including linting)?
• Do the CI tests pass with this change (enable it first in your forked repo and wait for the github action build to finish)?
• Is the new or changed code fully tested?
• Is a documentation update included (if this change modifies existing APIs, or introduces new ones)?
• Is there an example added to the examples folder (if applicable)?
• Was the change added to CHANGES file?

NOTE: these things are not required to open a PR and can be done
afterwards / while the PR is open.

Description of change

Please provide a description of the change here.

[codecov-commenter]

Codecov Report

Merging #2332 (5439e5d) into master (29f80a5) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #2332   +/-   ##
=======================================
  Coverage   92.19%   92.19%           
=======================================
  Files         111      111           
  Lines       28751    28751           
=======================================
  Hits        26507    26507           
  Misses       2244     2244           

Impacted Files	Coverage Δ
tests/test_cluster.py	96.96% <0.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.