Merge pull request #330 from lduchosal/dependabot/nuget/versionize-1.… #288

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	# This workflow integrates SecurityCodeScan with GitHub's Code Scanning feature
	# SecurityCodeScan is a vulnerability patterns detector for C# and VB.NET

	name: SecurityCodeScan

	on:
	push:
	branches: [ "master" ]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [ "master" ]
	schedule:
	- cron: '35 15 * * 1'

	env:
	DOTNET_ROLL_FORWARD: Major

	jobs:
	SCS:
	runs-on: windows-latest
	steps:
	- uses: actions/checkout@master
	- uses: nuget/setup-nuget@v1
	- uses: microsoft/setup-msbuild@v1.0.2

	- name: Set up projects for analysis
	uses: security-code-scan/security-code-scan-add-action@main

	- name: Restore dependencies
	run: dotnet restore src

	- name: Build
	run: dotnet build --no-restore src

	- name: Convert sarif for uploading to GitHub
	uses: security-code-scan/security-code-scan-results-action@main

	- name: Upload sarif
	uses: github/codeql-action/upload-sarif@v2

Provide feedback