Create codeql-analysis.yml

[mmacata]

This PR adds Code-QL which is a tool for

Code scanning alerts
Automatically detect common vulnerability and coding errors 

It will run for master branch and protected branches and for MRs into the master branch.
For more details see https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/enabling-code-scanning-for-a-repository

[griembauer]

Thanks, very useful. How was this .yml generated? Did you follow the steps here (https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/enabling-code-scanning-for-a-repository) and this file was automatically generated? Or did you find a template somewhere?

[mmacata]

Thanks, very useful. How was this .yml generated? Did you follow the steps here (https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/enabling-code-scanning-for-a-repository) and this file was automatically generated? Or did you find a template somewhere?

Yes I followed the steps on the page and it was automatically generated. The analysis did run on my fork and the report was generated as expected.

[neteler]

Nice work. The results are here:

https://github.com/mundialis/actinia_core/security/code-scanning