Create codeql-analysis.yml

[jenshnielsen]

Github recommends codeql for security testing. This just proposes to merge their default workflow

[codecov]

Codecov Report

Merging #3314 (d84d9bd) into master (5262fdf) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master    #3314   +/-   ##
=======================================
  Coverage   66.20%   66.20%           
=======================================
  Files         220      220           
  Lines       29250    29250           
=======================================
  Hits        19365    19365           
  Misses       9885     9885           

too early

[trevormorgan]

why does github recommend doing this?

[jenshnielsen]

It recommended by https://github.com/QCoDeS/Qcodes/security/code-scanning its supposed to scan for security vulnerabilities but I am not sure how effective it is for python

[trevormorgan]

It recommended by https://github.com/QCoDeS/Qcodes/security/code-scanning its supposed to scan for security vulnerabilities but I am not sure how effective it is for python

interesting, if it is effective it could be worth the extra build time or maybe this is an action that should be performed weekly?

[jenshnielsen]

@trevormorgan @astafan8 I rebase this removed the comments and changed it to only run once a week. Lets try to enable it and see it it is useful

[astafan8]

indeed, let's give it a try weekly