Test: Verify SCS/Scorecard works with fork PRs [DO NOT MERGE]

[cosmir17]

Purpose

Testing the SCS fix from PM-19431 to verify that Supply Chain Security scanning works correctly for fork PRs using GITHUB_TOKEN.

What this tests

• Fork PRs can run Checkmarx with SCS/Scorecard enabled
• GITHUB_TOKEN has sufficient permissions for SCS on public forks
• The fix in feat: Add fork-friendly Checkmarx action for public repos (PM-19431) upload-sarif-github-action#25 works as expected

Expected behavior

The CI should show:

• ✅ Checkmarx scan runs via pull_request_target
• ✅ "SCS/Scorecard: Enabled" in the logs
• ✅ SCS parameters included in scan command
• ✅ No permission errors for SCS token

Action required

• Please DO NOT merge this PR
• Will close once SCS functionality is verified
• Check the Checkmarx scan logs for SCS results

Related to: PM-19431
Testing: Commit 3afeaae from PR #25

[cosmir17]

Test completed successfully! ✅

The fork-friendly Checkmarx action with SCS/Scorecard support has been:

• Successfully tested (all CI checks passing)
• Merged to main branch in feat: Add fork-friendly Checkmarx action for public repos (PM-19431) upload-sarif-github-action#25

This test PR served its purpose and can now be closed.