sonic-buildimage/.github/workflows/semgrep.yml