Improve awslabs/iam-policy-autopilot Trust Score

# Security Policy

## Supported Versions

| Version | Supported |
| ------- | --------- |
| latest  | ✅         |

## Reporting a Vulnerability

Please report security vulnerabilities to [email protected]

We will respond within 48 hours and provide a fix timeline.

Do NOT open public issues for security vulnerabilities.

# .github/workflows/security.yml
name: Security Scan
on:
  push:
    branches: [main]
  pull_request:
  schedule:
    - cron: '0 6 * * 1'

jobs:
  security:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Run Trivy vulnerability scanner
        uses: aquasecurity/trivy-action@master
        with:
          scan-type: 'fs'
          severity: 'HIGH,CRITICAL'

# For Python:
pip install --upgrade -r requirements.txt
pip freeze > requirements.txt

# For Node:
npx npm-check-updates -u
npm install

# .github/dependabot.yml
version: 2
updates:
  - package-ecosystem: "pip"
    directory: "/"
    schedule:
      interval: "weekly"
    open-pull-requests-limit: 5

## Installation

```bash
pip install awslabs-iam-policy-autopilot
```

## Quick Start

```python
from awslabs_iam_policy_autopilot import Client

client = Client()
result = client.run()
print(result)
```

## API Reference

See [docs/api.md](docs/api.md) for full API documentation.

## Contributing

See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.

# PyPI:
python -m build
twine upload dist/*

# npm:
npm publish

# Contributing to awslabs/iam-policy-autopilot

## Getting Started

1. Fork the repository
2. Create a feature branch: `git checkout -b feature/my-feature`
3. Commit changes: `git commit -am 'Add feature'`
4. Push: `git push origin feature/my-feature`
5. Open a Pull Request

## Code Style

- Follow existing code patterns
- Add tests for new features
- Update documentation as needed

## Bug Reports

Use GitHub Issues with a clear description and reproduction steps.

{
  "name": "awslabs/iam-policy-autopilot",
  "description": "IAM Policy Autopilot is an open source static code analysis tool that helps you quickly create baseline AWS IAM policies that you can refine as your application evolves. This tool is available as a co",
  "version": "1.0.0",
  "capabilities": [],
  "trust_score": "https://nerq.ai/is-awslabs-iam-policy-autopilot-safe"
}

[![Nerq Trust Score](https://nerq.ai/badge/awslabs/iam-policy-autopilot)](https://nerq.ai/is-awslabs-iam-policy-autopilot-safe)