allow scan to be triggered manually

.github/workflows/security.yml

@@ -2,6 +2,7 @@
 name: Security
 on:  # yamllint disable-line rule:truthy
   pull_request:
+  workflow_dispatch:
   schedule:
     - cron: 0 0 * * *