qodana main pipeline (#85)

* switch build pipeline to build on pr only, create separate pipeline for main

* Add permission for security events

* Replace sarif with local scan since qodana cloud fails to download the sarif

.github/workflows/build.yml

@@ -1,9 +1,5 @@
 name: build
 on:
-  workflow_dispatch:
-  push:
-    branches:
-      - main
   pull_request:
 
 env:
@@ -17,6 +13,7 @@ jobs:
       contents: write
       pull-requests: write
       checks: write
+      security-events: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/qodana_main.yml

@@ -16,6 +16,7 @@ jobs:
       contents: write
       pull-requests: write
       checks: write
+      security-events: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4