Add `semgrep` tp find reachable dependency vulnerabilities in code

[sentenz]

Semgrep is a fast, open-source, static analysis engine for finding bugs, detecting vulnerabilities in third-party dependencies, and enforcing code standards.