* Update semgrep to 0.113.0 * Print semgrep version in CI
- Instead of installing semgrep through PyPI on every run, leverage the upstream docker image. - This should isolate us from dependency updates required to run newer versions of semgrep
* add semgrep yml * add semgrep ci job * remove replication semgrep rule in oss * fix makefile * add semgrep to ci * upwind triple if in ui.go semgrep refactoring