Use ephemeral runners for Copilot, and custom config for CodeQL

.github/workflows/codeql.yml

@@ -0,0 +1,44 @@
+name: CodeQL
+
+on:
+    push:
+        branches: ["main"]
+    pull_request:
+    workflow_dispatch:
+    schedule:
+        - cron: "20 4 * * 0"
+
+permissions:
+    contents: read
+
+jobs:
+    analyze:
+        name: Analyze (${{ matrix.language }})
+        runs-on: intel-ubuntu-latest
+        timeout-minutes: 45
+        permissions:
+            actions: read
+            contents: read
+            security-events: write
+
+        strategy:
+            fail-fast: false
+            matrix:
+                language: [actions, javascript-typescript]
+
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+              with:
+                  persist-credentials: false
+
+            - name: Initialize CodeQL
+              uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
+              with:
+                  languages: ${{ matrix.language }}
+                  build-mode: none
+
+            - name: Perform CodeQL analysis
+              uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
+              with:
+                  category: "/language:${{ matrix.language }}"

.github/workflows/copilot-code-review.yml

@@ -0,0 +1,14 @@
+name: Copilot Code Review
+
+on: workflow_dispatch
+
+jobs:
+    copilot-setup-steps:
+        runs-on: intel-ubuntu-latest
+        permissions:
+            contents: read
+        steps:
+            - name: Checkout repository
+              uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+              with:
+                  persist-credentials: false

README.md

@@ -5,6 +5,7 @@
     <td align="left" border="0" valign="middle">
       <a href="https://github.com/intel/simics-vs-code-tcf-debug/actions/workflows/test.yml"><img src="https://github.com/intel/simics-vs-code-tcf-debug/actions/workflows/test.yml/badge.svg" alt="Tests" align="middle"></a>&nbsp;
       <a href="LICENSE.md"><img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="License: MIT" align="middle"></a>&nbsp;
+      <a href="https://github.com/intel/simics-vs-code-tcf-debug/actions/workflows/codeql.yml"><img src="https://github.com/intel/simics-vs-code-tcf-debug/actions/workflows/codeql.yml/badge.svg" alt="CodeQL" align="middle"></a>&nbsp;
       <a href="https://scorecard.dev/viewer/?uri=github.com/intel/simics-vs-code-tcf-debug"><img src="https://api.securityscorecards.dev/projects/github.com/intel/simics-vs-code-tcf-debug/badge" alt="OpenSSF Scorecard" align="middle"></a>&nbsp;
       <a href="https://www.bestpractices.dev/projects/16330"><img src="https://www.bestpractices.dev/projects/16330/badge" alt="OpenSSF Best Practices" align="middle"></a>
     </td>