Add CodeQL analysis workflow configuration

[nstarman]

No description provided.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[coveralls]

Pull Request Test Coverage Report for Build 22191076500

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 99.591%

---

Totals
Change from base Build 22190629474:	0.0%
Covered Lines:	973
Relevant Lines:	977

---

💛 - Coveralls

[Copilot]

Pull request overview

This pull request adds a CodeQL Advanced workflow configuration to enable automated security scanning of the repository. CodeQL is GitHub's semantic code analysis engine that helps identify vulnerabilities and coding errors.

Changes:

• Adds a new GitHub Actions workflow file .github/workflows/codeql.yml that configures CodeQL analysis for both Python and GitHub Actions languages
• Configures the workflow to run on pushes and pull requests to the master branch, plus a weekly scheduled scan
• Sets up appropriate permissions for security scanning and uses CodeQL action version 4

Comments suppressed due to low confidence (1)

.github/workflows/codeql.yml:47

• The 'actions' language is configured for CodeQL analysis, but this repository primarily contains Python code with GitHub Actions workflow files. The 'actions' language in CodeQL is intended for analyzing GitHub Actions workflows themselves for security issues, which may be excessive for this project. Consider whether analyzing GitHub Actions workflows is necessary for this repository's security posture, or if Python analysis alone is sufficient.

        - language: actions
          build-mode: none

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[nstarman]

Squash merge plz.