Trunk, you got a big storm coming, honey

.github/actions/setup-base/action.yml

@@ -1,5 +1,5 @@
-name: 'Setup Build Base Composite Action'
+name: "Setup Build Base Composite Action"
-description: 'Base build actions for Meshtastic Platform IO steps'
+description: "Base build actions for Meshtastic Platform IO steps"
 
 runs:
   using: "composite"

.github/workflows/sec_sast_flawfinder.yml

@@ -22,8 +22,8 @@ jobs:
       - name: flawfinder_scan
         uses: david-a-wheeler/flawfinder@2.0.19
         with:
-            arguments: '--sarif ./'
+          arguments: "--sarif ./"
-            output: 'flawfinder_report.sarif'
+          output: "flawfinder_report.sarif"
 
       # step 3
       - name: save report as pipeline artifact

.github/workflows/sec_sast_semgrep_cron.yml

@@ -6,17 +6,15 @@ on:
     branches:
       - master
   schedule:
-    - cron:  '0 1 * * 6'
+    - cron: "0 1 * * 6"
 
 jobs:
-
   semgrep-full:
     runs-on: ubuntu-latest
     container:
       image: returntocorp/semgrep
 
     steps:
-
       # step 1
       - name: clone application source code
         uses: actions/checkout@v3

.github/workflows/sec_sast_semgrep_pull.yml

@@ -1,17 +1,14 @@
 ---
 name: Semgrep Differential Scan
-on:
+on: pull_request
-  pull_request
 
 jobs:
-
   semgrep-diff:
     runs-on: ubuntu-latest
     container:
       image: returntocorp/semgrep
 
     steps:
-
       # step 1
       - name: clone application source code
         uses: actions/checkout@v3