Update semgrep workflow

[zaibon]

Summary by CodeRabbit

---

• Chore: Updated GitHub Actions workflow file semgrep.yml to enhance code security scanning.
  • The workflow now runs on the latest Ubuntu version.
  • It is scheduled to run every Sunday, ensuring regular checks.
  • Permissions for the job have been updated to provide necessary access levels.
  • A disclaimer has been added about third-party actions and their separate terms of service.
  • The SARIF file generated by Semgrep is now uploaded after each scan, providing detailed security reports.

[coderabbitai[bot]]

Walkthrough

This pull request introduces significant enhancements to the GitHub Actions workflow, specifically to the semgrep.yml file. The changes include improved security measures, updated branch configurations, and a new schedule for the workflow. It also updates permissions and steps in the semgrep job.

Changes

File	Summary
.github/workflows/semgrep.yml	The workflow file has been updated with enhanced security disclaimers, revised branch configurations for the push event, and a new schedule for weekly runs. The semgrep job now has updated permissions and steps, including code scanning and SARIF file generation.

🐇💻

In the land of code where the shadows lie, A rabbit hops, its gaze held high. With each key press, a change is spun, A dance of logic under the digital sun.

Security tightened, schedules set, In the world of code, no threat we let. Through branches new, our work takes flight, Bathed in the glow of the monitor's light.

So here's to changes, large and small, To the rabbit coder, standing tall. In the realm of bytes, may we never fall, For in our hands, the future we install. 🌟

---

Tips

Chat with CodeRabbit Bot (@coderabbitai)

• Mention @coderabbitai in any review comment for bot assistance.
• Note: Review comments are made on code diffs or files, not on the PR overview.

Pause Incremental Reviews

• Insert @coderabbitai: ignore in the PR description to halt the bot's ongoing reviews. Remove the line to resume.

[codecov[bot]]

Codecov Report

Merging #27 (e9dbb21) into master (6aec40a) will not change coverage. The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #27   +/-   ##
=======================================
  Coverage   84.00%   84.00%           
=======================================
  Files           4        4           
  Lines         150      150           
=======================================
  Hits          126      126           
  Misses         24       24