Refine CI pipeline

### The CI pipeline has some issues and missing key steps

Issue:
- Sonarcloud does not include test coverage

Missing Steps:
- Secret detection
- Dependency scanning
- CodeQL