chore(ci): implement code scanning (#18)

Implement PR code scanning and SBOM on release.

Author: jscaltreto

.github/workflows/e2e-tests.yaml

@@ -3,6 +3,7 @@ name: E2E Tests
 on:
   pull_request:
   push:
+    branches: [master]
 
 jobs:
   e2e-tests:

.github/workflows/unit-tests.yaml

@@ -3,6 +3,7 @@ name: Unit Tests
 on:
   pull_request:
   push:
+    branches: [master]
 
 jobs:
   unit-tests:
@@ -18,3 +19,13 @@ jobs:
 
       - name: Run Unit Tests
         run: make test-unit
+
+  scan:
+    needs: unit-tests
+    if: github.event_name == 'pull_request'
+    uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
+
+  release-sbom:
+    needs: unit-tests
+    if: github.event_name == 'push'
+    uses: circlefin/circle-public-github-workflows/.github/workflows/attach-release-assets.yaml@v1