CI: Add GitHub Actions workflows for ShellCheck and script permission enforcement

- Support for pull_request, pull_request_target (on main), push (to main), and workflow_dispatch

Signed-off-by: Srikanth Muppandam <smuppand@qti.qualcomm.com>

Author: smuppand

.github/workflows/check-executable-permissions.yml

@@ -1,10 +1,14 @@
 name: Enforce Script Executable Permissions
 
 on:
-  pull_request:
+  pull_request_target:
+    branches: [ "main" ]
     paths:
       - '**/run.sh'
       - '**/*.sh'
+  push:
+    branches: [ "main" ]
+  workflow_dispatch:
 
 jobs:
   permissions:

.github/workflows/preflight-checker-workflow.yml

@@ -15,7 +15,7 @@ jobs:
     uses: qualcomm-linux/qli-actions/.github/workflows/multi-checker.yml@main
     with:
         repolinter: true # default: true
-        semgrep: false # default: true
+        semgrep: true # default: true
         copyright-license-detector: true # default: true
         pr-check-emails: true # default: true
 

.github/workflows/shellcheck.yml

@@ -1,6 +1,11 @@
 name: Shell Lint
 
-on: [pull_request, push]
+on:
+  pull_request_target:
+    branches: [ "main" ]
+  push:
+    branches: [ "main" ]
+  workflow_dispatch:
 
 jobs:
   shellcheck: