ci: Add code-scan` workflow

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

Author: stefanprodan

.github/workflows/backport.yaml

@@ -7,6 +7,6 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
-    uses: fluxcd/gha-workflows/.github/workflows/backport.yaml@v0.0.3
+    uses: fluxcd/gha-workflows/.github/workflows/backport.yaml@v0.0.4
     secrets:
       github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/code-scan.yaml

@@ -0,0 +1,15 @@
+name: code-scan
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+jobs:
+  analyze:
+    permissions:
+      contents: read
+      security-events: write
+    uses: fluxcd/gha-workflows/.github/workflows/code-scan.yaml@v0.0.4
+    secrets:
+      github-token: ${{ secrets.GITHUB_TOKEN }}
+      fossa-token: ${{ secrets.FOSSA_TOKEN }}

.github/workflows/labels-sync.yaml

@@ -11,4 +11,4 @@ jobs:
     permissions:
       issues: write
       contents: read
-    uses: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml@v0.0.1
+    uses: fluxcd/gha-workflows/.github/workflows/labels-sync.yaml@v0.0.4