I disabled them manually because it always breaks. It is trying to build a docker image from a debian buster which is a thing that is no longer doable. It has a PR already but the project has its last commit 2 years ago. ioggstream/bandit-report-artifacts#10