Adding codeQL code scanning analysis in CI/CD

[cyrillay]

Add a code vulnerability analysis to step up the security of the repository. This also makes a step towards fitting DINUM's security guidelines.

This tool is nicely integrated with github, and a UI is available on Security tab>Code Scanning. In the screenshot below, I tested it on my branch.

https://github.com/etalab-ia/albert-api/issues#workspaces/674305a48a105f001711f8e4/epics/Z2lkOi8vcmFwdG9yL1plbmh1YkVwaWMvMjIwMzAy?assigneeIds=Z2lkOi8vcmFwdG9yL1plbmh1YlVzZXIvMTk1NTk3Ng

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[moscaale]

I think we should run this job before merging on main ? Like running it every time we are updating the Pull Request ?

[cyrillay]

I think we should run this job before merging on main ? Like running it every time we are updating the Pull Request ?

Yes, that's a good point, it should run for every pull request, not only when pushed to main. I modify

[leoguillaume]

LGTM