[WIP] codeql workflow

[bowenliang123]

Why are the changes needed?

• Github's CodeQL for code scanning to discover vulnerabilities
  • CodeQL: https://codeql.github.com/
  • CodeQL Action: https://github.com/github/codeql-action

How was this patch tested?

• Add some test cases that check the changes thoroughly including negative and positive cases if possible

• Add screenshots for manual tests if appropriate

• Run test locally before make a pull request

[codecov-commenter]

Codecov Report

Merging #4929 (979c99f) into master (5f98539) will not change coverage.
The diff coverage is 0.00%.

@@          Coverage Diff           @@
##           master   #4929   +/-   ##
======================================
  Coverage    0.00%   0.00%           
======================================
  Files         563     563           
  Lines       30891   30893    +2     
  Branches     4030    4030           
======================================
- Misses      30891   30893    +2     

Impacted Files	Coverage Δ
.../java/org/apache/kyuubi/jdbc/KyuubiHiveDriver.java	0.00% <ø> (ø)
.../java/org/apache/kyuubi/client/RestClientConf.java	0.00% <0.00%> (ø)

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

[bowenliang123]

Discovered risks on this PR branch can be found at https://github.com/apache/kyuubi/security/code-scanning?query=pr%3A4929+tool%3ACodeQL+is%3Aopen .

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[bowenliang123]

Closed this PR.
Although the codeql action scans out a list of alerts of different levels for Java and Python codes, it doesn't alert the violations in newly added vulnerable Java code in this PR.