Add InfraScan audit workflow to GitHub Actions

[igor-soldev]

Description

This PR adds a new GitHub Actions workflow (.github/workflows/main.yml) to integrate InfraScan into the CI pipeline.

Motivation: To automate comprehensive infrastructure and security scanning. The workflow is configured to trigger on every push and pull_request. It uses the soldevelo/[email protected] action to generate an HTML report, which is then automatically uploaded as a GitHub artifact (retained for 14 days). This allows maintainers and contributors to easily review scan results directly from the Actions tab.

Affected Dependencies

This workflow introduces the following GitHub Actions dependencies:

• actions/checkout@v4
• soldevelo/[email protected]
• actions/upload-artifact@v4

How has this been tested?

• Workflow trigger validation: Verified that the workflow triggers correctly on push/PR events.
• Artifact generation: Checked that the infrascan-reports directory is created with proper permissions and that the HTML report is successfully generated by the action.
• To reproduce: Push a new commit to this branch and navigate to the "Actions" tab. Open the "InfraScan Audit" workflow run and verify that the infrascan-report artifact is available for download at the bottom of the summary page.
• Test configuration: Executed on the ubuntu-latest GitHub-hosted runner.

Checklist

• I have followed the Contribution Guidelines and Code of Conduct
• My changes are covered by tests (Note: N/A for CI/CD workflow configuration)