ci: add code ql as a verify check (#62)

.github/workflows/ci.yaml

@@ -6,7 +6,7 @@ on:
     branches:
       - main
   pull_request:
-    branches: [ main ]
+    branches: [ main, release/*, bugfix/* ]
     paths-ignore:
       - '**.md'
       - 'docs/**'
@@ -18,6 +18,7 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+
   Checkstyle:
     permissions:
       id-token: write
@@ -31,6 +32,10 @@ jobs:
       - name: Run Checkstyle
         run: ./gradlew checkstyleMain checkstyleTest
 
+  CodeQL:
+    uses: eclipse-edc/.github/.github/workflows/codeql-analysis.yml@main
+    secrets: inherit
+
   Javadoc:
     runs-on: ubuntu-latest
     steps:
@@ -40,7 +45,6 @@ jobs:
       - name: Run Javadoc
         run: ./gradlew javadoc
 
-
   Unit-Tests:
     runs-on: ubuntu-latest
     steps:
@@ -51,10 +55,3 @@ jobs:
         uses: eclipse-edc/.github/.github/actions/run-tests@main
         with:
           command: ./gradlew test
-
-  Create-Snapshot:
-    # forks cannot trigger Jenkins
-    needs: [ Checkstyle, Javadoc, Unit-Tests ]
-    if: github.repository == 'eclipse-edc/Runtime-Metamodel' && github.event_name == 'push' && github.ref_name == 'main'
-    uses: eclipse-edc/.github/.github/workflows/publish-snapshot.yml@main
-    secrets: inherit