Add Scan for Vulnerable Dependencies

[vncoelho]

We found that adding dependency scanning step into the workflow, release or not can prevent some possible attacks.

- name: Scan for Vulnerable Dependencies
  run: dotnet list package --vulnerable --include-transitive

[vncoelho]

closed by #4082