fix: explicit shell bash

.gitea/workflows/sca.yml

@@ -9,20 +9,30 @@ on:
 jobs:
   pip-audit:
     runs-on: ubuntu-latest
+    defaults:
+      run:
+        shell: bash
     steps:
       - name: Checkout code
+        shell: bash
         run: |
+          rm -rf repo
           git clone https://oauth2:${{ secrets.GITEA_TOKEN }}@git.akarkode.com/${{ gitea.repository }}.git repo
-          cd repo && git checkout ${{ gitea.sha }}
+          cd repo
+          git checkout ${{ gitea.sha }}
 
       - name: Install pip-audit
+        shell: bash
         run: pip3 install pip-audit
 
       - name: Run pip-audit scan
-        working-directory: repo
+        shell: bash
         run: |
+          cd repo
           pip-audit -r Pipfile.lock || true
 
       - name: Fail on HIGH/CRITICAL
-        working-directory: repo
-        run: pip-audit -r Pipfile.lock --fail-on-severity high
+        shell: bash
+        run: |
+          cd repo
+          pip-audit -r Pipfile.lock --fail-on-severity high