chore(cicd): Update the SAST scan step

Author: timoa

.github/workflows/nodejs.yml

@@ -84,7 +84,7 @@ jobs:
   #     - name: Stop Docker container
   #       run: docker-compose down
 
-  # -- SEMGREP ----------------------------------------------------------------
+  # -- SAST SCAN --------------------------------------------------------------
   code-security:
     runs-on: ubuntu-latest
     needs: tests
@@ -95,13 +95,18 @@ jobs:
       - name: Checkout
         uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846 # tag=v3
 
-      - name: Semgrep SAST Scan
-        uses: returntocorp/semgrep-action@v1
+      - name: Perform Scan
+        uses: ShiftLeftSecurity/scan-action@master
+
+        env:
+          WORKSPACE: https://github.com/${{ github.repository }}/blob/${{ github.sha }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SCAN_ANNOTATE_PR: true
+
+      - uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # tag=v3.0.0
         with:
-          config: >-
-            p/security-audit
-            p/secrets
-          auditOn: push
+          name: reports
+          path: reports
 
   # -- RELEASE ----------------------------------------------------------------
   release:
@@ -134,8 +139,7 @@ jobs:
         id: meta
         uses: docker/metadata-action@e5622373a38e60fb6d795a4421e56882f2d7a681 # tag=v3.6.2
         with:
-          images: |
-            timoa/app-stores-prometheus-exporter
+          images: ${{ github.repository }}
           tags: |
             type=schedule
             type=ref,event=branch
@@ -144,6 +148,7 @@ jobs:
             type=semver,pattern={{major}}.{{minor}}
             type=semver,pattern={{major}}
             type=sha
+            type=raw,value=latest
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # tag=v1.2.0
@@ -156,8 +161,8 @@ jobs:
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      -
-        name: Build and push
+
+      - name: Build and push
         uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a # tag=v2.10.0
         with:
           context: .