Add GitHub Advanced Security requirements

.github/workflows/codeql.yml

@@ -0,0 +1,23 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "qa", "master" ]
+  pull_request:
+    branches: [ "qa", "master" ]
+  schedule:
+    - cron: '30 12 * * 1'
+
+jobs:
+  analyze:
+    strategy:
+      matrix:
+        php-versions: [ '7.4', '8.0' ]
+    name: Analyze PHP ${{ matrix.php-versions }}
+    uses: tithely/php-workflows/.github/workflows/codeql.yml@main
+    with:
+      github-event-name: ${{ github.event_name }}
+      php-version: ${{ matrix.php-versions }}
+      php-extensions: pdo_pgsql
+    secrets:
+      actions-access-token: ${{ secrets.ACTIONS_ACCESS_TOKEN }}

composer.json

@@ -9,7 +9,8 @@
     },
     "require-dev": {
         "phpunit/phpunit": "^9.4",
-        "symfony/yaml": "^5.0"
+        "symfony/yaml": "^5.0",
+        "vimeo/psalm": "^5.7"
     },
     "scripts":{
         "test": "./vendor/bin/phpunit -c phpunit.xml"