* Create codeql-scan.yml Addition of the CodeQL SAST tool * Create trivy-scan.yml Scan dependencies on push/PR