Update secret-scanning.yml

actions/setup-dotnet@v3 is not allowed to be used in theangrytech-git/MSDO. Actions in this workflow must be: within a repository owned by theangrytech-git.

Added .net 6.0.415 (LTS) to run locally in the $HOME directory to get around forking the setup-dotnet repo

Author: theangrytech-git

.github/workflows/secret-scanning.yml

@@ -24,10 +24,13 @@ jobs:
       - name: Set tool to only run secret scan
         run: echo "TOOLS=credscan" >> $GITHUB_ENV
 
-      - name: Setup .NET 6 SDK
-        uses: actions/setup-dotnet@v3
-        with:
-          dotnet-version: 6.0.x        
+      - name: Install .NET 6 SDK
+        run: |
+          wget https://dot.net/v1/dotnet-install.sh -O dotnet-install.sh
+          chmod +x dotnet-install.sh
+          ./dotnet-install.sh --version 6.0.415 --install-dir "$HOME/dotnet"
+          echo "DOTNET_ROOT=$HOME/dotnet" >> $GITHUB_ENV
+          echo "$HOME/dotnet" >> $GITHUB_PATH     
 
       - name: Run Microsoft Security DevOps - Secret Scan
         uses: theangrytech-git/security-devops-action@main