Use artifact scanner in debug artifacts PR checks

Author: henrymercer

.github/workflows/debug-artifacts-failure-safe.yml

@@ -73,6 +73,14 @@ jobs:
           CODEQL_ACTION_EXTRA_OPTIONS: '{ "database": { "finalize": ["--invalid-option"] } }'
         with:
           expect-error: true
+      - name: Verify artifact scan ran
+        shell: bash
+        run: |
+          if [[ "$CODEQL_ACTION_ARTIFACT_SCAN_FINISHED" != "true" ]]; then
+            echo "Error: Best effort artifact scan did not run"
+            exit 1
+          fi
+          echo "✓ Best effort artifact scan completed successfully"
   download-and-check-artifacts:
     name: Download and check debug artifacts after failure in analyze
     if: github.triggering_actor != 'dependabot[bot]'

.github/workflows/debug-artifacts-safe.yml

@@ -67,6 +67,14 @@ jobs:
         run: ./build.sh
       - uses: ./../action/analyze
         id: analysis
+      - name: Verify artifact scan ran
+        shell: bash
+        run: |
+          if [[ "$CODEQL_ACTION_ARTIFACT_SCAN_FINISHED" != "true" ]]; then
+            echo "Error: Best effort artifact scan did not run"
+            exit 1
+          fi
+          echo "✓ Best effort artifact scan completed successfully"
   download-and-check-artifacts:
     name: Download and check debug artifacts
     if: github.triggering_actor != 'dependabot[bot]'