add automatic security check

.github/workflows/security_check.yml

@@ -0,0 +1,25 @@
+name: Automatic Security Check
+
+on:
+#  schedule:
+#    - cron: "0 8 1,15 * *" # At 08:00 on day-of-month 1 and 15
+  push:
+
+jobs:
+  security-check:
+    name: Security Check
+    runs-on: ubuntu-latest
+    container:
+      image: node:16.17
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Install dependencies
+        run: yarn install
+      - name: Run yarn audit
+        run: yarn audit --no-color > .yarn-audit
+      - name: Upload report
+        uses: actions/upload-artifact@v3
+        with:
+          name: yarn-audit-report
+          path: .yarn-audit