feat: add codeql workflow for typescript

[harmeetsingh11]

Issue that this pull request solves

Closes: #87

Proposed changes

Files added

• .github/workflows/codeql.yml

To run this workflow you need to enable the following permission:

1. Go to your project repository settings
2. On left pane > Actions > General

3. Scroll down and Go to Workflow permissions > select "Read and write permissions"

4. Click save and its done.

Types of changes

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update (Documentation content changed)
• Other (please describe):

Checklist

• I am a GSSoC'24 contributor
• I have performed a self-review of my own code
• My changes generate no new warnings

@Yeasir0032 Please review this PR. After merging the PR, don't forget to add gssoc24 ,level labels and assign this PR to me, otherwise my points won't be added.
Thanks

[github-actions]

Thank you for submitting your pull request! We'll review it as soon as possible.

[github-actions]

Welcome to Our repository.🎊 Thank you so much for taking the time to point this out.

[PayalKumari10]

Tell me, @harmeetsingh11 what exactly this workflow does. Why did you create it?

[harmeetsingh11]

@PayalKumari10 This workflow uses CodeQL, GitHub's code analysis engine, to automate security checks in a TypeScript repository by scanning for vulnerabilities and presenting findings as code scanning alerts.

It will be triggered by every push, commit, and pull request, the workflow continuously monitors the codebase to maintain high security and quality standards. It was created to proactively identify and flag potential security issues, particularly in environments with frequent code changes, thereby preventing the introduction of vulnerabilities and ensuring a robust and secure application.

[PayalKumari10]

Thank you for the explanation, @harmeetsingh11. This CodeQL workflow for automated security checks in our TypeScript repository sounds great. It will help us maintain high security and quality standards by continuously monitoring for vulnerabilities.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[harmeetsingh11]

@Yeasir0032 please add gssoc and level labels to the PR, otherwise my points won't be added.