fix(ci-infra): scan supply-chain content on pushes to main (#1281)