ci: fix artifact paths, rename artifacts to DVLED-SW-TK, add scan-on-demand workflow

Author: dmkarthi

.github/workflows/ci.yml

@@ -73,6 +73,6 @@ jobs:
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: always()
         with:
-          name: all-scan-reports-${{ github.run_id }}
-          path: ${{ env.GITHUB_WORKSPACE }}/reports/
+          name: DVLED-SW-TK-CI-${{ github.run_id }}
+          path: ${{ github.workspace }}/reports/
           retention-days: 30

.github/workflows/daily_build.yml

@@ -78,6 +78,6 @@ jobs:
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: always()
         with:
-          name: dvledtx-build-artifacts-${{ github.run_id }}
-          path: ${{ env.GITHUB_WORKSPACE }}/reports/
+          name: DVLED-SW-TK-DailyBuild-${{ github.run_id }}
+          path: ${{ github.workspace }}/reports/
           retention-days: 30

.github/workflows/pull_request.yml

@@ -79,6 +79,6 @@ jobs:
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         if: always()
         with:
-          name: dvledtx-pr-artifacts-${{ github.run_id }}
-          path: ${{ env.GITHUB_WORKSPACE }}/reports/
+          name: DVLED-SW-TK-PR-${{ github.run_id }}
+          path: ${{ github.workspace }}/reports/
           retention-days: 30

.github/workflows/scan_on_demand.yml

@@ -0,0 +1,69 @@
+#
+# BSD 3-Clause License
+# Copyright (C) 2026 Intel Corporation
+# SPDX-License-Identifier: BSD-3-Clause
+#
+name: Scan On Demand
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch to scan'
+        required: true
+        default: 'main'
+
+permissions: {}
+
+concurrency:
+  group: ${{ github.workflow }}-${{ inputs.branch }}
+  cancel-in-progress: true
+
+jobs:
+  scan:
+    name: Scan On Demand
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - name: Clean up previous run
+        env:
+          WORKSPACE: ${{ github.workspace }}
+        run: |
+          find "$WORKSPACE" -mindepth 1 -maxdepth 1 -exec rm -rf {} +
+          rm -rf /tmp/trivy-*
+
+      - name: Checkout repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          ref: ${{ inputs.branch }}
+          fetch-depth: 0
+          persist-credentials: false
+
+      - name: ShellCheck
+        uses: ./.github/actions/analysis/shellcheck
+
+      - name: zizmor Scan
+        uses: ./.github/actions/analysis/zizmor
+
+      - name: cppcheck
+        uses: ./.github/actions/analysis/cppcheck
+
+      # - name: Coverity Scan
+      #   uses: ./.github/actions/analysis/coverity
+      #   with:
+      #     coverity-url: ${{ secrets.COVERITY_URL }}
+      #     coverity-user: ${{ secrets.COVERITY_ARTIFACTORY_USER }}
+      #     coverity-password: ${{ secrets.COVERITY_ARTIFACTORY_PASSWORD }}
+
+      - name: Trivy Scan
+        uses: ./.github/actions/analysis/trivy
+
+      - name: Upload scan reports
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        if: always()
+        with:
+          name: DVLED-SW-TK-ScanOnDemand-${{ inputs.branch }}-${{ github.run_id }}
+          path: ${{ github.workspace }}/reports/
+          retention-days: 30