open-vault/.circleci/config/jobs/semgrep.yml