https://bloghold.com.de/post/how-to-set-up-semgrep-github-action-for-code-scanning-r60uuv