fix: only scan rg.exe with BinSkim (#36)

* chore: run BinSkim only on output file

* Debug output

* Only scan one rg.exe

build/main.yml

@@ -18,6 +18,8 @@ extends:
   parameters:
     sdl:
       sourceAnalysisPool: 1es-oss-windows-2022-x64
+      binskim:
+        analyzeTargetGlob: '$(Build.SourcesDirectory)/ripgrep/target/**/release/rg.exe'
       tsa:
         enabled: true