Add workflow for CodeQL Analysis

[gonzaloriestra]

WHY are these changes introduced?

The default CodeQL setup is not working since April because of a wrong configuration, but it doesn't show any error.

I tried to add the Security Code Scanner tool by Shopify in #5333, but it looks like it's failing because it's not ready yet for public repos.

So I'm adding a custom CodeQL workflow, generated from GitHub with the default values. It seems to work.

WHAT is this pull request doing?

• Removes the Security Code Scanner workflow that doesn't work
• Adds a CodeQL workflow

How to test your changes?

CI

Measuring impact

How do we know this change was effective? Please choose one:

• n/a - this doesn't need measurement, e.g. a linting rule or a bug-fix
• Existing analytics will cater for this addition
• PR includes analytics changes to measure impact

Checklist

• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've considered possible documentation changes

[github-actions]

Coverage report

St.❔	Category	Percentage	Covered / Total
🟡	Statements	75.6% (+0.03% 🔼)	9052/11974
🟡	Branches	70.84% (+0.03% 🔼)	4415/6232
🟡	Functions	75.4% (+0.04% 🔼)	2375/3150
🟡	Lines	76.11% (+0.04% 🔼)	8548/11231

Show files with reduced coverage 🔻

St.❔	File	Statements	Branches	Functions	Lines
🟢	... / app-event-watcher.ts	95.18% (-1.2% 🔻)	86.49% (-2.7% 🔻)	95.45%	100%

Test suite run success

2044 tests passing in 913 suites.

Report generated by 🧪jest coverage report action from 2fbc091

[gonzaloriestra]

Closing in favor of #5333

[amcaplan]

Looks about right, let's see how it runs!

[gonzaloriestra]

Merge activity

• Feb 6, 6:15 AM EST: A user started a stack merge that includes this pull request via Graphite.
• Feb 6, 6:15 AM EST: A user added this pull request to the GitHub merge queue with Graphite.