chore: Enable codeql action

[naveensrinivasan]

This action runs GitHub's industry-leading semantic code analysis engine,
CodeQL, against a repository's source code to find security vulnerabilities.

https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql

https://github.com/ossf/scorecard/blob/main/docs/checks.md#sast
Signed-off-by: naveen 172697+naveensrinivasan@users.noreply.github.com

[Byron]

Thanks a lot!

Can you make it so it only runs once all tests have passed?
And could you exclude the tests from being checked as well?

[naveensrinivasan]

Thanks a lot!

Can you make it so it only runs once all tests have passed? And could you exclude the tests from being checked as well?

I can ignore the tests folder in this PR.

[Byron]

Thanks! Can you also make it so it only runs once all tests have passed?

[naveensrinivasan]

Thanks! Can you also make it so it only runs once all tests have passed?

I can do that in the next PR.

[Byron]

Alright, I will be waiting for exclusion of tests in this PR, so the dependency adjustment can be happening in the next one (even though I think it could happen in this one as well, but that might be a misconception).

[naveensrinivasan]

I am going to close this for now. I can probably pick it up later. Thanks