DCKA-5386: Add SAST tooling for sdk repo

.bearer/bearer.ignore

@@ -0,0 +1 @@
+{}

.bearer/bearer.yml

@@ -0,0 +1,7 @@
+# Repository-specific Bearer configuration.
+
+rule:
+  skip-rule: []
+
+scan:
+  skip-path: []

.github/workflows/bearer-full.yml

@@ -0,0 +1,27 @@
+name: Bearer-CLI Full Scan
+
+on:
+  workflow_dispatch:
+    inputs:
+      minimum_severity:
+        description: Lowest severity to include in the scan.
+        required: true
+        type: choice
+        default: high
+        options:
+          - critical
+          - high
+          - medium
+          - low
+          - all
+
+permissions:
+  contents: read
+
+jobs:
+  run:
+    uses: docknetwork/engineering-toolkit/.github/workflows/bearer-full.yml@main
+    with:
+      minimum_severity: ${{ inputs.minimum_severity }}
+      toolkit_repository: docknetwork/engineering-toolkit
+      toolkit_ref: main

.github/workflows/bearer-pr.yml

@@ -0,0 +1,20 @@
+name: Bearer-CLI
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  run:
+    uses: docknetwork/engineering-toolkit/.github/workflows/bearer-diff.yml@main
+    with:
+      minimum_severity: ${{ vars.BEARER_MIN_SEVERITY || 'high' }}
+      enforce: ${{ vars.BEARER_ENFORCE == 'true' }}
+      toolkit_repository: docknetwork/engineering-toolkit
+      toolkit_ref: main