security(semgrep): test run semgrep full

Author: moscaale

.github/workflows/security.yml

@@ -34,7 +34,7 @@ jobs:
   # Scan complet sur push main et releases (thorough)
   semgrep-full:
     name: Semgrep SAST (full)
-    if: github.event_name == 'push' || github.event_name == 'release' || github.event_name == 'workflow_dispatch'
+    if: github.event_name == 'push' || github.event_name == 'release' || github.event_name == 'workflow_dispatch' || github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     container:
       image: semgrep/semgrep