move the wrapper script to a proper file

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

.github/workflows/find-vulnerabilities.yml

@@ -16,7 +16,9 @@ jobs:
       - name: Get the action.yml from the current branch
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
-          sparse-checkout: action.yml
+          sparse-checkout: |
+            action.yml
+            scripts/scanpipe.sh
           sparse-checkout-cone-mode: false
           persist-credentials: false