Add new github action to perform semgrep differential scanning. #1278

	# ********************************************************************************
	# Copyright (c) 2023, 2024 Contributors to the Eclipse Foundation
	#
	# See the NOTICE file(s) with this work for additional
	# information regarding copyright ownership.
	#
	# This program and the accompanying materials are made
	# available under the terms of the Apache Software License 2.0
	# which is available at https://www.apache.org/licenses/LICENSE-2.0.
	#
	# SPDX-License-Identifier: Apache-2.0
	# ********************************************************************************

	name: Code Freeze Bot

	# Controls when the workflow will run
	on:
	pull_request_target:
	issue_comment:
	types: [created]

	permissions:
	contents: write
	pull-requests: write

	jobs:
	# Check if the pull request target branch matches the required branch-regex?
	codefreeze_branch_check:
	uses: adoptium/.github/.github/workflows/code-freeze-regex-branch.yml@main
	with:
	branch-regex: "^v[0-9]+.[0-9]+.[0-9]+$"

	# Code freeze if branch-regex matches
	codefreeze_if_branch_match:
	needs: codefreeze_branch_check
	uses: adoptium/.github/.github/workflows/code-freeze.yml@main
	if: (github.event_name == 'pull_request_target' \|\| (github.event_name == 'issue_comment' && github.event.issue.pull_request)) && needs.codefreeze_branch_check.outputs.regex-matches == 'true'
	secrets: inherit

Provide feedback