Test your PRs for vulnerabilities before merging