GHAS integration: Code scanning & Dependency review workflow files

Author: estrajnik

.github/workflows/security.code-scanning.yml

@@ -0,0 +1,12 @@
+name: CodeQL
+
+on:
+  pull_request:
+    branches: [ main ]
+  push:
+    branches: [ main ]
+  workflow_dispatch:
+
+jobs:
+  codeql-javascript:
+    uses: chargehound/security-workflows-public/.github/workflows/codeql-javascript.yml@main

.github/workflows/security.dependency-review.yml

@@ -0,0 +1,10 @@
+name: Dependency Review
+
+on:
+  pull_request:
+    branches: [ main ]
+  workflow_dispatch:
+
+jobs:
+  dependency-review:
+    uses: chargehound/security-workflows-public/.github/workflows/dependency-review.yml@main