U/sgriffin/codeql (#78)

* Create codeql.yml

* merge codeql into ci

.github/workflows/ci-build.yml

@@ -9,13 +9,22 @@ on:
 
 jobs:
   build:
-
     runs-on: windows-latest
     continue-on-error: true
+    timeout-minutes: 360
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
 
     steps:
     - uses: actions/checkout@v3
 
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v2
+      with:
+        languages: 'csharp'
+
     - name: Machine setup
       shell: pwsh
       run: ./scripts/machine-setup.ps1
@@ -52,6 +61,11 @@ jobs:
         $path = & "${env:ProgramFiles(x86)}\Microsoft Visual Studio\Installer\vswhere.exe" -latest -property installationPath
         & $path\MSBuild\Current\Bin\amd64\msbuild.exe /m /p:Configuration="Release" ./FSSHTTPWOPIInspector/Test/WOPIautomation/WOPIautomation.sln
 
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v2
+      with:
+        category: "/language:csharp"
+
     - name: Publish Artifacts
       uses: actions/upload-artifact@v3
       with: