ci: add coverity workflow

Add coverity scan to github actions.

Signed-off-by: Pavan Nikhilesh <pbhagavatula@marvell.com>

.github/workflows/build.yml

@@ -2,8 +2,7 @@ name: build-cn10k
 
 on:
   push:
-  schedule:
-    - cron: '0 0 * * 1'
+  pull_request:
 
 jobs:
   ubuntu-cn10k-build:
@@ -110,18 +109,27 @@ jobs:
         echo "PKG_POSTFIX=${PKG_POSTFIX}" >> "$GITHUB_OUTPUT"
         [[ "$PKG_POSTFIX" == "-latest" ]] && TAG=latest || TAG=${PKG_VERSION_NAME}
         echo "TAG=${TAG}" >> "$GITHUB_OUTPUT"
+    - name: Coverity Full Scan
+      if: ${{ github.event_name != 'pull_request' }}
+      uses: vapier/coverity-scan-action@v1.8.0
+      with:
+        command: ninja -C build
+        email: ${{ secrets.COVERITY_USER }}
+        token: ${{ secrets.COVERITY_TOKEN }}
     - name: Upload debian package as artifact
       uses: actions/upload-artifact@v4.3.1
       with:
         name: dao-cn10k${{ steps.artifacts.outputs.PKG_POSTFIX }}_${{ steps.artifacts.outputs.PKG_VERSION_NAME }}_arm64.deb
         path: ${{ github.workspace }}/artifacts/dao-cn10k${{ steps.artifacts.outputs.PKG_POSTFIX }}_${{ steps.artifacts.outputs.PKG_VERSION_NAME }}_arm64.deb
     - name: Release DPDK cn10k package
+      if: ${{ github.event_name != 'pull_request' }}
       uses: softprops/action-gh-release@v2.0.4
       with:
         tag_name: ${{ steps.artifacts.outputs.TAG }}
         files: |
             ${{ github.workspace }}/artifacts/dao-cn10k${{ steps.artifacts.outputs.PKG_POSTFIX }}_${{ steps.artifacts.outputs.PKG_VERSION_NAME }}_arm64.deb
     - name: Dispatch package update event
+      if: ${{ github.event_name != 'pull_request' }}
       run: |
         curl -L \
           -X POST \