Add CodeQL scanning.

Closes #2664

Author: mp911de

.github/workflows/project.yml

@@ -10,6 +10,11 @@ on:
   pull_request_target:
     types: [opened, edited, reopened]
 
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+
 jobs:
   Inbox:
     runs-on: ubuntu-latest