Add CodeQL workflow (#552)

* Add CodeQL workflow

* “Helicalize”

* Run only on schedule

It's too slow for pull requests

* Trigger on `pull_request`

It's a pity it takes time, because it's useful

* Add concurrency option

* Use the terser `github.ref_name`

Co-authored-by: Daniel Barnes <[email protected]>

Co-authored-by: Daniel Barnes <[email protected]>

Author: 0x2b3bfa0

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,24 @@
+name: CodeQL
+on:
+  pull_request:
+  schedule:
+  - cron: '0 0 * * *'
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}
+  cancel-in-progress: true
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    steps:
+    - uses: actions/checkout@v3
+    - uses: github/codeql-action/init@v2
+      with:
+        languages: go
+    - uses: github/codeql-action/autobuild@v2
+    - uses: github/codeql-action/analyze@v2
+env:
+  CODEQL_EXTRACTOR_GO_BUILD_TRACING: on