Investigate if it is possible to have Github `Security` tab only analyze Skaffold code and not examples

Issue tracks investigating if it is possible to have Github `Security` tab only analyze Skaffold code and not examples (perhaps via an allow/deny-list). Currently the Skaffold `Security` tab has `240` notifications but most/all of those pertain to examples and are not actually part of the core Skaffold binary. Looking for a way to get meaningful signal from the notification there and also have the # reflect the # of actionable things for the team to work on