Cleanup build files. Add security scan for PHP

.github/workflows/publish-release.yml

@@ -63,10 +63,6 @@ jobs:
       # but keep the .git folder, because we need it for the next step
       - name: Cleanup files
         run: |
-          rm -f build.sh || true
-          rm -f Gruntfile.js || true
-          rm -f Makefile || true
-          rm -f package.json || true
           rm -f composer.lock || true
           rm -rf vendor/composer/installers || true
           find ./ -name '.git*' -not -path './.git' -type f -delete || true

.github/workflows/security-scan.yml

@@ -0,0 +1,25 @@
+name: Security Scan
+run-name: Security Scan
+
+on: 
+  push:
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  code-scanning:
+    name: Code Scanning (grype)
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Run Security Check
+        id: test
+        uses: anchore/scan-action@v3
+        with:
+          path: .
+          output-format: table
+
+