This repository covers the security of the container itself which is scanned for vulnerabilities every 24 hours. You can see the scan status in the actions tab.
The dependencies are automatically scanned using Dependabot. Dependencies are regularly updated. You can check the status by listing open Pull requests with the dependencies label.