codeql upload report by code matrix (open-edge-platform#334)

* codeql upload report by code matrix

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

* fix lint warning

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

* codeql: checkout with persist-credentials: false

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

---------

Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>

Author: cheeyanglee

.github/workflows/codeql.yml

@@ -2,16 +2,16 @@ name: "CodeQL Advanced"
 
 on:
   push:
-    branches: [ 3.0, 3.0-dev ]
+    branches: [3.0, 3.0-dev]
   pull_request:
-    branches: [ 3.0, 3.0-dev ]
+    branches: [3.0, 3.0-dev]
   schedule:
     - cron: '0 4 * * 3'
 
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
-    runs-on: [ ubuntu-latest ]
+    runs-on: [ubuntu-latest]
     permissions:
       # required for all workflows
       security-events: write
@@ -20,37 +20,43 @@ jobs:
       fail-fast: false
       matrix:
         include:
-        - language: actions
-          build-mode: none
-        - language: go
-          build-mode: autobuild
-        - language: python
-          build-mode: none
+          - language: actions
+            build-mode: none
+          - language: go
+            build-mode: autobuild
+          - language: python
+            build-mode: none
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
-      with:
-        languages: ${{ matrix.language }}
-        build-mode: ${{ matrix.build-mode }}
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
-      with:
-        category: "/language:${{matrix.language}}"
-
-    - name: Generate Security Report
-      uses: rsdmike/github-security-report-action@v3.0.4
-      with:
-        template: report
-        token: ${{ secrets.SECURITY_TOKEN }}
-
-    - name: GitHub Upload Release Artifacts
-      uses: actions/upload-artifact@v4
-      with:
-        name: report
-        path: |
-         ./report.pdf
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v3
+        with:
+          languages: ${{ matrix.language }}
+          build-mode: ${{ matrix.build-mode }}
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v3
+        with:
+          category: "/language:${{matrix.language}}"
+
+      - name: Generate Security Report
+        uses: rsdmike/github-security-report-action@v3.0.4
+        with:
+          template: report
+          token: ${{ secrets.SECURITY_TOKEN }}
+
+      - name: Rename Report by Code Matrix
+        run: |
+          mv ./report.pdf ./report-${{ matrix.language }}.pdf
+
+      - name: GitHub Upload Release Artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: report-${{ matrix.language }}
+          path: |
+           ./report-${{ matrix.language }}.pdf