Expected workflow usage scenario

[markphip]

How is this intended to work in the context of overall workflows? Is it a step that should be added to an existing workflow that has built the binaries and run tests or should it be in its own workflow file?

I was heading down the path of the latter but then I noticed BinSkim step fails because it cannot find the binaries. So I assume the intend would be to add this to an existing workflow process that has built the binaries.