1. Decide the static analysis tool 2. Integrate with github actions. Every PR should do the analysis and prevent merge if issues are found.
