create codeql report (#245)

Signed-off-by: John O'Loughlin <[email protected]>

Author: johnoloughlin

Diff for: .github/workflows/codeql.yml

@@ -46,3 +46,16 @@ jobs:
         uses: github/codeql-action/analyze@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v2.3.3
         with:
           category: "/language:${{ matrix.language }}"
+                    
+      - name: CodeQL and Dependabot Report Action
+        uses: rsdmike/[email protected]
+        with:
+          template: report
+          token: ${{ secrets.SECURITY_TOKEN }}
+
+      - name: GitHub Upload Release Artifacts
+        uses: actions/upload-artifact@v2
+        with:
+          name: report
+          path: |
+             ./report.pdf