Add workflow to run security scan for gama's github repository

[canack]

We can add an Open Source Scanner to our workflow, which will run every time we push to the PR or main branch.