* adds a security pipeline, updates pipeline triggers * prevent pipeline from running twice, if PR is open