codeql support added

[duranserkan]

No description provided.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[lovasoa]

What is this and why do you want to add this to this repo?

[duranserkan]

Apologies, I intended to open this PR against my fork to test the workflow first, but I accidentally targeted the main repository.

However, the changes are valid. This introduces CodeQL, a SAST (Static Application Security Testing) tool. Unlike standard linters, it performs taint analysis over the AST (Abstract Syntax Tree) to detect security vulnerabilities with a much higher degree of confidence.

I have confirmed that this action runs correctly on my fork with clean results, so it should be safe to merge.

Running SAST scans on commits and PRs is a security best practice, so I strongly recommend integrating this.

I use this exact workflow in another repository of mine. You can safely check the run logs here to verify that the configuration is valid and effective:

https://github.com/duranserkan/DRN-Project/actions/runs/20662690492/workflow
https://github.com/duranserkan/DRN-Project/actions/runs/20662690492/job/59328518670

[lovasoa]

ok, thanks !