Sonarcloud updates

[lylebarner]

This pull request incorporates changes required to allow openmct-mcws to allow for security scanning to be performed using SonarCloud

• Create new GitHubAction that runs CoddeQL, pre-processes the results for import into SonarCloud, performs SonarCloud analysis and imports CodeQL results
• Create new configuration file for SonarCloud analysis

Remaining actions required to enable analysis

• Configured project on SonarCloud server (must be performed by organization owner)
• Add SonarCloud access token to repository as SONAR_TOKEN

[davetsay]

👍

[davetsay]

👍

[davetsay]

This looks good to me. I just have one question. I see some scrub stuff included, and some scrub stuff commented out. Are we able to now just remove scrub entirely? Or, is there an interim phase while all the projects get onto SonarCloud?

[davetsay]

@lylebarner , also, a sonarcloud action is failing

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud