ci: add security scans via shared templates (#1)

* ci: add security scans via shared templates

* ci: retrigger after pipeline-templates went public

* ci: add security-events permission for SARIF upload

* ci: retrigger after semgrep fix in templates

* ci: retrigger after semgrep fix in templates

* ci: retrigger after semgrep fix in templates

---------

Co-authored-by: Daniel <krueger.daniel@mail.de>

Author: PantevoSystems

.github/workflows/security.yml

@@ -0,0 +1,26 @@
+name: Security Scans
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write 
+
+jobs:
+  semgrep:
+    uses: BlueCodeIT/pipeline-security-templates/.github/workflows/semgrep-sast.yml@main
+    with:
+      config: 'p/default'
+      severity: 'WARNING'
+      fail-on-issues: false
+
+  checkov:
+    uses: BlueCodeIT/pipeline-security-templates/.github/workflows/checkov-iac.yml@main
+    with:
+      framework: 'github_actions,dockerfile'
+      soft-fail: true