Add the code quality github workflow from app-boilerplate

.github/workflows/codeql_checks.yml

@@ -0,0 +1,45 @@
+name: "CodeQL"
+
+on:
+ workflow_dispatch:
+ push:
+ branches:
+ - master
+ - main
+ - develop
+ pull_request:
+ # Excluded path: add the paths you want to ignore instead of deleting the workflow
+ paths-ignore:
+ - '.github/workflows/*.yml'
+ - 'tests/*'
+
+jobs:
+ analyse:
+ name: Analyse
+ strategy:
+ matrix:
+ sdk: [ "$NANOS_SDK", "$NANOX_SDK", "$NANOSP_SDK" ]
+ #'cpp' covers C and C++
+ language: [ 'cpp' ]
+ runs-on: ubuntu-latest
+ container:
+ image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder-legacy:latest
+
+ steps:
+ - name: Clone
+ uses: actions/checkout@v3
+
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v2
+ with:
+ languages: ${{ matrix.language }}
+ queries: security-and-quality
+
+ # CodeQL will create the database during the compilation
+ - name: Build
+ run: |
+ make BOLOS_SDK=${{ matrix.sdk }} -C app
+ make BOLOS_SDK=${{ matrix.sdk }} -C app DEBUG=1
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v2