Add code quality workflow

[sej3506]

Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors. Any problems identified by the analysis are shown in GitHub.

If code scanning finds a potential vulnerability or error in your code, GitHub displays an alert in the repository.

Adding a Code Scanning tool is a OWASP recommendation.