Add CI step for sourcecode security scan

[dkasimovskiy]

We need to automate source code security scan to quickly fix CVEs.

• [ ] Choose a tool
• [ ] Add CI step
• [ ] Prevent merge source code with security issues