Add code scanning with CodeQL

Author: dassencio

.github/workflows/static-code-analysis.yml

@@ -0,0 +1,33 @@
+name: Static code analysis
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+  workflow_dispatch:
+
+jobs:
+  codeql:
+    name: Scan code with CodeQL
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        fetch-depth: 2
+
+    # For PRs, checkout the PR's head instead of the merge commit.
+    - name: Checkout pull request head
+      if: github.event_name == 'pull_request'
+      run: git checkout HEAD^2
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: python
+        queries: security-and-quality
+
+    - name: Perform CodeQL analysis
+      uses: github/codeql-action/analyze@v1

README.md

@@ -1,4 +1,5 @@
 ![Functional tests](https://github.com/dassencio/mapgen/workflows/Functional%20tests/badge.svg)
+![Static code analysis](https://github.com/dassencio/mapgen/workflows/Static%20code%20analysis/badge.svg)
 
 # Description