Support fossa scanning

.github/workflows/build.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - "main"
+      - "support-fossa-scanning"
   workflow_dispatch:
     inputs:
       build-ref:

.release/ci.hcl

@@ -14,6 +14,7 @@ project "nomad" {
       "release/1.1.x",
       "release/1.2.x",
       "release/1.3.x",
+      "support-fossa-scanning",
     ]
   }
 }
@@ -150,6 +151,15 @@ event "verify" {
   }
 }
 
+event "fossa-scan" {
+  depends = ["verify"]
+  action "fossa-scan" {
+    organization = "hashicorp"
+    repository = "crt-workflows-common"
+    workflow = "fossa-scan"
+  }
+}
+
 ## These are promotion and post-publish events
 ## they should be added to the end of the file after the verify event stanza.