chore(ci): reorganize semgrep files

Signed-off-by: Roberto Scolaro <[email protected]>

.github/workflows/semgrep_checks.yml

@@ -1,10 +1,30 @@
-name: Absolute include paths check
+name: Semgrep Checks
 on:
   pull_request:
     branches:
       - master
+      - 'release/**'
+      - 'maintainers/**'
 
 jobs:
+  insecure-api:
+    name: check-insecure-api
+    runs-on: ubuntu-latest
+    container:
+      image: returntocorp/semgrep:1.41.0
+    steps:
+      - name: Checkout Libs ⤵️
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        with:
+          fetch-depth: 0
+      - name: Scan PR for insecure API usage 🕵️
+        run: |
+          semgrep scan \
+            --error \
+            --metrics=off \
+            --baseline-commit ${{ github.event.pull_request.base.sha }} \
+            --config=./semgrep/insecure-api
+
   absolute-include-paths:
     name: check-absolute-include-paths
     runs-on: ubuntu-latest