Add semgrep scanning

.github/workflows/deploy.yml

@@ -7,6 +7,8 @@ on:
 env:
     DOCKER_IMAGE_NAME: "galera_cluster_healthcheck"
 jobs:
+  security_scan:
+    uses: ./.github/workflows/security_scan.yml 
   build-and-publish-image:
     name: Build and Publish Docker image
     runs-on: ubuntu-latest

.github/workflows/security_scan.yml

@@ -0,0 +1,34 @@
+name: "Test and Coverage"
+
+on: 
+  push:
+    branches:
+      - '*'
+      - '**'
+      - '*/*'
+      - '**/**'
+      - '!dev'
+    tags-ignore:
+      - '**'
+  workflow_call:
+
+
+
+jobs:
+  security_scan_analysis:
+    name: Smegrep Scan Analysis
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout code
+      uses: actions/checkout@v3
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: 3.x
+
+    - name: Install semgrep
+      run: python3 -m pip install semgrep
+
+    - name: Run semgrep
+      run:  semgrep scan --error