add socket tier 1 scan workflow

Author: kanwalpreetd

.github/workflows/socket-scan.yml

@@ -43,16 +43,18 @@ jobs:
   socket-scan:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: ruby/setup-ruby@v1
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: ruby/setup-ruby@12fd324f1d0b43274fdc8130f6980590a667c455 # v1.312.0
         with:
-          ruby-version: "3"
-      - uses: actions/setup-node@v4
+          ruby-version: "3.4.9"
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
-          node-version: "20"
+          node-version: "22.22.3"
+      - name: Enable Corepack (yarn/pnpm per repo packageManager)
+        run: corepack enable
 
-      - name: Install Socket CLI + yarn
-        run: npm install -g yarn socket
+      - name: Install Socket CLI
+        run: npm install -g socket
 
       - name: Run Socket reachability scan
         env: