Using this GitHub Action, scan files changed in current Pull Request with inline code annotations.
Contrary to other published actions this one is JavaScript, not Docker based (so, it's faster and platform independent) and scans only files changed in current PR.