ci: upload clippy results to code scanning

.github/workflows/check.yml

@@ -6,9 +6,14 @@ on:
   pull_request:
     branches: ["main"]
 
+permissions:
+  contents: read
+
 jobs:
   clippy:
     runs-on: ubuntu-latest
+    permissions:
+      security-events: write
 
     steps:
       - name: Checkout repository
@@ -23,8 +28,18 @@ jobs:
       - name: Setup Rust cache
         uses: Swatinem/rust-cache@v2
 
+      - name: Install SARIF tooling
+        run: cargo install clippy-sarif sarif-fmt
+
       - name: Run clippy
-        run: cargo clippy --all
+        run: cargo clippy --all --all-features --message-format=json | clippy-sarif | tee /tmp/result.sarif | sarif-fmt
+        continue-on-error: true
+
+      - name: Upload analysis results
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: /tmp/result.sarif
+          wait-for-processing: true
 
   rustfmt:
     runs-on: ubuntu-latest