Merge pull request #744 from pinosu/667-static_checks

Add static checking for common bug patterns

.github/workflows/codeql-analizer.yml

@@ -0,0 +1,35 @@
+name: "Code Scanning - Action"
+
+on:
+ pull_request:
+ paths:
+ - "**.go"
+ push:
+ branches: [ master ]
+ paths:
+ - "**.go"
+
+jobs:
+ CodeQL-Build:
+ runs-on: ubuntu-latest
+ permissions:
+ actions: read
+ contents: read
+ security-events: write
+
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v2.3.5
+
+ # Initializes the CodeQL tools for scanning.
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v1
+ with:
+ languages: 'go'
+ queries: crypto-com/cosmos-sdk-codeql@main,security-and-quality
+
+ - name: Autobuild
+ uses: github/codeql-action/autobuild@v1
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v1