fix: skip CVE audit steps gracefully when OSS_INDEX secrets are not configured

Author: pranitaurlam

.github/workflows/cve-scanning.yml

@@ -41,8 +41,8 @@ jobs:
         working-directory: website
 
       - run: npx --yes auditjs ossi --whitelist allow-list.json -u ${{ secrets.OSS_INDEX_USERNAME }} -p ${{ secrets.OSS_INDEX_TOKEN }}
-        if: success() || failure()
+        if: (success() || failure()) && secrets.OSS_INDEX_USERNAME != ''
 
       - run: npx --yes auditjs ossi --whitelist ../allow-list.json -u ${{ secrets.OSS_INDEX_USERNAME }} -p ${{ secrets.OSS_INDEX_TOKEN }}
         working-directory: website
-        if: success() || failure()
+        if: (success() || failure()) && secrets.OSS_INDEX_USERNAME != ''