CI: add security rules from semgrep

[rndquu]

Check this repository which introduces a workflow for scanning security issues from https://semgrep.dev/p/smart-contracts.

What should be done:

• add a new workflow to scan for security issues via semgrep

[molecula451]

do we want this to be run each time a PR is opened no?

[molecula451]

/start

[ubiquibot]

Deadline	Fri, Jul 26, 6:53 PM UTC
Registered Wallet	0x4D0704f400D57Ba93eEa88765C3FcDBD826dCFc4

Tips:

• Use /wallet 0x0000...0000 if you want to update your registered payment wallet address.
• Be sure to open a draft pull request as soon as possible to communicate updates on your progress.
• Be sure to provide timely updates to us when requested, or you will be automatically unassigned from the task.

[rndquu]

do we want this to be run each time a PR is opened no?

Yes

[molecula451]

[cohow]

/start

[ubiquity-os]

Warning!	This task was created over 50 days ago. Please confirm that this issue specification is accurate before starting.
Deadline	Sat, Sep 14, 10:29 PM UTC
Beneficiary	0x31BcF24D34F018B3Aee4c6E97307221aFe47bc96

Tips:

• Use /wallet 0x0000...0000 if you want to update your registered payment wallet address.
• Be sure to open a draft pull request as soon as possible to communicate updates on your progress.
• Be sure to provide timely updates to us when requested, or you will be automatically unassigned from the task.

[ubiquity-os]

@cohow, this task has been idle for a while. Please provide an update.

[cohow]

waiting on code review.