Add Checkov action to CI/CD pipeline

[james-garriss]

🗣 Description

The goal of this PR was to add the Checkov action to the CI/CD pipeline. While there, I also slightly reorg'd the pipeline to fail fast and rewrote the PS linter action (reduced the runtime from 3m30s to 1m).

Closes #980

💭 Motivation and context

This is part of our efforts to build a robust CI/CD pipeline that builds, tests, and releases ScubaGear.

🧪 Testing

I ran the pipeline, fixed a security bugs, and saw that everything was a lovely shade of green.

✅ Pre-approval checklist

• This PR has an informative and human-readable title.
• PR targets the correct parent branch (e.g., main or release-name) for merge.
• Changes are limited to a single goal - eschew scope creep!

Well, I did have a little bit of scope creep, as improving the PS linter wasn't technically part of the task. But I really wanted the pipeline to run faster. Now it does. :-D

• Changes are sized such that they do not touch excessive number of files.
• All future TODOs are captured in issues, which are referenced in code comments.
• These code changes follow the ScubaGear content style guide.
• Related issues these changes resolve are linked preferably via closing keywords.
• All relevant type-of-change labels added.
• All relevant project fields are set.
• All relevant repo and/or project documentation updated to reflect these changes.
• All automated checks (e.g., linting, static analysis, unit/smoke tests) passed.

✅ Pre-merge checklist

• PR passed smoke test check.

• Feature branch has been rebased against changes from parent branch, as needed

  Use Rebase branch button below or use this reference to rebase from the command line.

• Resolved all merge conflicts on branch

• Notified merge coordinator that PR is ready for merge via comment mention

✅ Post-merge checklist

• Feature branch deleted after merge to clean up repository.
• Verified that all checks pass on parent branch (e.g., main or release-name) after merge.

[buidav]

comments

[james-garriss]

@nanda-katikaneni , this one is ready. Thanks!