added initial veracode scan pipeline #3

	name: Veracode scan

	on:
	pull_request:
	branches: ['\d+.x']
	# Allows you to run this workflow manually from the Actions tab
	workflow_dispatch:
	schedule:
	- cron: '0 14 * * 6'

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:

	- name: Checkout code
	uses: actions/checkout@v3

	- name: Setup .NET
	uses: actions/setup-dotnet@v2
	with:
	dotnet-version: \|
	3.1.x
	6.0.x

	- name: Restore dependencies
	run: dotnet restore --ignore-failed-sources

	- name: Build solution
	run: dotnet publish --no-restore

	- name: Veracode Upload And Scan (Static Application Security Testing)
	uses: veracode/[email protected]
	with:
	appname: 'lf-repository-api-client-dotnet'
	createprofile: true
	filepath: 'src/bin/Debug'
	vid: '${{ secrets.VERACODE_API_ID }}'
	vkey: '${{ secrets.VERACODE_API_KEY }}'

	- name: Run Veracode Software Composition Analysis (SCA)
	env:
	SRCCLR_API_TOKEN: ${{ secrets.SRCCLR_API_TOKEN }}
	uses: veracode/[email protected]
	with:
	create-issues: false
	allow-dirty: true
	recursive: true

Provide feedback