Add codeql to scan codes

[kezhenxu94]

No description provided.

[codecov-commenter]

Codecov Report

Merging #11836 (8aca255) into dev (d0d481d) will decrease coverage by 0.98%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##                dev   #11836      +/-   ##
============================================
- Coverage     39.60%   38.62%   -0.99%     
+ Complexity     4692     4035     -657     
============================================
  Files          1014      992      -22     
  Lines         37936    36547    -1389     
  Branches       4244     4258      +14     
============================================
- Hits          15026    14115     -911     
+ Misses        21303    20808     -495     
- Partials       1607     1624      +17     

Impacted Files	Coverage Δ
...ache/dolphinscheduler/dao/entity/K8sNamespace.java	18.18% <0.00%> (-57.23%)	⬇️
...a/org/apache/dolphinscheduler/dao/entity/User.java	18.18% <0.00%> (-55.96%)	⬇️
...e/dolphinscheduler/dao/entity/AlertSendStatus.java	0.00% <0.00%> (-55.89%)	⬇️
...apache/dolphinscheduler/dao/entity/DataSource.java	18.18% <0.00%> (-54.99%)	⬇️
...lphinscheduler/dao/entity/ProcessTaskRelation.java	8.00% <0.00%> (-54.50%)	⬇️
...g/apache/dolphinscheduler/dao/entity/Resource.java	0.00% <0.00%> (-48.24%)	⬇️
...he/dolphinscheduler/dao/entity/TaskGroupQueue.java	20.00% <0.00%> (-46.04%)	⬇️
...apache/dolphinscheduler/dao/entity/AlertGroup.java	4.00% <0.00%> (-44.94%)	⬇️
...olphinscheduler/dao/entity/ProcessInstanceMap.java	0.00% <0.00%> (-41.94%)	⬇️
...scheduler/api/dto/resources/ResourceComponent.java	31.25% <0.00%> (-41.48%)	⬇️
... and 82 more

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[caishunfeng]

Great 👍

[sonarqubecloud]

SonarCloud Quality Gate failed.   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
38 Code Smells

20.6% Coverage
8.7% Duplication

[caishunfeng]

LGTM

[kezhenxu94]

We should pay more attention to future PRs that breaks the CodeQL analysis, it indeed unveils some possible vulnerabilities of the codes