Added Trivy and Veracode security scans (#48)

* Added Trivy and Veracode security scans

* Added permissions in workflow

Author: s99mj

.github/workflows/security_trivy.yml

@@ -0,0 +1,19 @@
+name: Security trivy dependency check
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "35 9 * * MON-FRI" # Every weekday at 09:35 UTC
+
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  
+jobs:
+  security-kotlin-trivy-check:
+    name: Project security trivy dependency check
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_trivy.yml@v2 # WORKFLOW_VERSION 
+    with:
+      channel_id: ${{ vars.SECURITY_ALERTS_SLACK_CHANNEL_ID || 'NO_SLACK' }}
+    secrets: inherit

.github/workflows/security_veracode_pipeline_scan.yml

@@ -0,0 +1,20 @@
+name: Security veracode pipeline scan
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "35 9 * * MON-FRI" # Every weekday at 09:35 UTC
+
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  
+jobs:
+  security-veracode-pipeline-scan:
+    name: Project security veracode pipeline scan
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_veracode_pipeline_scan.yml@v2 # WORKFLOW_VERSION 
+    with:
+      channel_id: ${{ vars.SECURITY_ALERTS_SLACK_CHANNEL_ID || 'NO_SLACK' }}
+      docker_image_app_dir: '/app'
+    secrets: inherit

.github/workflows/security_veracode_policy_scan.yml

@@ -0,0 +1,20 @@
+name: Security veracode policy scan
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "10 9 * * 1" # Every Monday at 09:10 UTC
+
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  
+jobs:
+  security-veracode-policy-check:
+    name: Project security veracode policy scan
+    uses: ministryofjustice/hmpps-github-actions/.github/workflows/security_veracode_policy_scan.yml@v2 # WORKFLOW_VERSION 
+    with:
+      channel_id: ${{ vars.SECURITY_ALERTS_SLACK_CHANNEL_ID || 'NO_SLACK' }}
+      docker_image_app_dir: '/app'
+    secrets: inherit