Add Scan for Vulnerable Dependencies (#4082)

* Add Scan for Vulnerable Dependencies

* fix workflow

* Add dependabot

* Added @vncoelho suggestions

* Added dotnet restore

---------

Co-authored-by: Will <[email protected]>

Author: cschuchardt88

.github/workflows/main.yml

@@ -31,6 +31,27 @@ jobs:
     - name: Check Format (*.cs)
       run: dotnet format --verify-no-changes --verbosity diagnostic
 
+  Check-Vulnerable:
+    name: Scan for Vulnerable Dependencies
+    needs: [Format]
+    timeout-minutes: 15
+    runs-on: ubuntu-latest
+    continue-on-error: true
+    steps:
+    - name: Checkout
+      uses: actions/[email protected]
+
+    - name: Setup .NET
+      uses: actions/[email protected]
+      with:
+        dotnet-version: ${{ env.DOTNET_VERSION }}
+
+    - name: Restore
+      run: dotnet restore
+
+    - name: Scan for Vulnerable Dependencies
+      run: dotnet list package --vulnerable --include-transitive
+
   Test-Everything:
     needs: [Format]
     timeout-minutes: 15