Investigate CodeQL (code scanning) support

[guidezpl]

• https://codeql.github.com/docs/codeql-overview/supported-languages-and-frameworks/#languages-and-compilers
• https://github.blog/changelog/2023-01-09-code-scanning-can-be-set-up-more-easily-without-committing-a-workflow-file-to-the-repository/

See flutter/flutter#130703 for the Flutter-specific issue

[athomas]

Is that different from what we're doing here?

sdk/.github/workflows/scorecards-analysis.yml

Line 52 in be4189f

# Upload the results to GitHub's code scanning dashboard.

[guidezpl]

This is meant for Dart language support generally. An app in a Flutter repo would have something like the following under <GitHub repo URL>/settings/code-scanning/default-setup

[athomas]

@jacob314 this seems more aligned with "developer tools" than Dart's engineering infrastructure.

[jhkim1067]

How is this issue progressing? I would like to see code analysis of Flutter (Dart) in Github Action.

[git-elliot]

I also need code scanning for flutter projects and dart packages.

[vicajilau]

Any update about this? This would be really helpfull as Dart Developers.

[ambr89]

Any update about this?