Validate CD Step at Run instead of Validate #1512

	---
	name: 🚨 Semgrep Analysis
	on:
	pull_request:
	types:
	- opened
	- synchronize
	jobs:
	semgrep:
	name: Evaluate code for vulnerabilities
	runs-on: ubuntu-latest
	# Skip any PR created by dependabot to avoid permission issues
	if: (github.actor != 'dependabot[bot]')

	steps:
	- name: Set up git repository
	uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4

	- uses: returntocorp/semgrep-action@549796168c0ddcb9149b10a0e79e5f6522f50797 # v1
	with:
	config: >- # more at semgrep.dev/explore
	p/security-audit
	p/secrets
	p/golang

Provide feedback