ci: add CodeQL analysis workflow

[vvbandeira]

Analyze python, ruby, and github-actions on push/PR to master and a weekly schedule, uploading SARIF results to code scanning.

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[openroad-ci]

🔍 QoR check

Metrics reflect the PR merge build — i.e. what will land on the target branch. Advisory — results are log-only and do not affect build status. The authoritative QoR gate remains the local rules-file check.

Commit a42f751 · Jenkins build #2 · Baseline: build

62 design(s) checked — 0 with regression(s), 0 without a comparable baseline.

Design	Variant	Verdict	local vs inline	passed / failed / missing
asap7/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/aes-block	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/aes-mbff	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/aes_lvt	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/cva6	base	✅ pass	✅ MATCH	12 / 0 / 0
asap7/ethmac	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/ethmac_lvt	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/gcd	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/gcd-ccs	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/ibex	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/jpeg_lvt	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/mock-alu	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/mock-cpu	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/riscv32i	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/riscv32i-mock-sram	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/swerv_wrapper	base	✅ pass	✅ MATCH	25 / 0 / 0
asap7/uart	base	✅ pass	✅ MATCH	25 / 0 / 0
gf180/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
gf180/aes-hybrid	base	✅ pass	✅ MATCH	25 / 0 / 0
gf180/ibex	base	✅ pass	✅ MATCH	25 / 0 / 0
gf180/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
gf180/riscv32i	base	✅ pass	✅ MATCH	25 / 0 / 0
gf180/uart-blocks	base	✅ pass	✅ MATCH	25 / 0 / 0
gt2n/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
gt2n/gcd	base	✅ pass	✅ MATCH	25 / 0 / 0
gt2n/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/gcd	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/i2c-gpio-expander	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/ibex	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/riscv32i	base	✅ pass	✅ MATCH	25 / 0 / 0
ihp-sg13g2/spi	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/ariane133	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/ariane136	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/black_parrot	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/bp_be_top	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/bp_fe_top	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/bp_multi_top	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/cva6	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/dynamic_node	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/gcd	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/ibex	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/mempool_group	base	✅ pass	✅ MATCH	12 / 0 / 0
nangate45/swerv	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/swerv_wrapper	base	✅ pass	✅ MATCH	25 / 0 / 0
nangate45/tinyRocket	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/chameleon	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/gcd	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/ibex	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/microwatt	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hd/riscv32i	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hs/aes	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hs/gcd	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hs/ibex	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hs/jpeg	base	✅ pass	✅ MATCH	25 / 0 / 0
sky130hs/riscv32i	base	✅ pass	✅ MATCH	25 / 0 / 0