feat(gha): add build pipeline security rules: curl-pipe-shell, workflow-env-secret#3784

kurt-r2c wants to merge 2 commits intodevelopsemgrep/semgrep-rules:developfrom

feat/build-pipeline-security-rulessemgrep/semgrep-rules:feat/build-pipeline-security-rulesCopy head branch name to clipboard