Thanks for sending a feature request! Please fill in the following template.
感谢提交功能需求！请填写以下模板。

Feature Description / 功能描述

Add SCA and Antipoison validation jobs to the ComputingActionTest/MindSpeed-Ops PR pipeline.

Background: the existing pipeline validates pre-commit, changed-file routing, and four UT shards, but the two openLiBing security plugins also need repository-specific validation.

Scope:

• Add the SCA PR action at v1.0.0.
• Add the malicious-code PR scan action at v1.0.0 with the Python rule.
• Use OIDC with repository read and id-token write permissions.
• Use the registered project name MindSpeed.

Test plan: create a draft PR from a personal dated branch containing only a harmless marker comment, then comment compile and inspect both jobs.

Acceptance criteria: both jobs start for the PR head commit, authenticate through OIDC, use project name MindSpeed, and return valid service results.

Use Case / 应用场景

This provides a safe validation target before carrying the two checks into the formal upstream workflow. CI maintainers and contributors benefit from visible SCA and malicious-code scan results.

Expected Behavior / 期望行为

A compile comment starts the pipeline. SCA and Antipoison appear as separate CodeCheck jobs. The validation PR remains draft and must not be merged.

Additional Information / 附加信息

Target repository: https://gitcode.com/ComputingActionTest/MindSpeed-Ops
Validation branch: BOCHENGZHANG/MindSpeed-Ops:test-sca-antipoison-20260911