CVE detection in CI

[alltilla]

Based on a suggestion from @ikheifets-splunk: #186 (comment)

[ikheifets-splunk]

I published PR for that issue and I tested on my fork and it's working.

Only one thing I wanna highlight we on CI allowing it to fail (I mean that non blocking release), because some of the security might be unresolved or problematically solve it asap. As I remember require policy for step available on Github settings.

[ikheifets-splunk]

@alltilla can you take a look?

[alltilla]

I am on PTO this week, but probably @MrAnno or @bshifter can help.