ci: add CodeQL analysis workflow (#243)

Author: IsseiHasegawa

.github/workflows/codeql-analysis.yml

@@ -12,6 +12,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
+env:
+  # Match .github/workflows/build.yml (plain Release; no LSan — avoids sanitizer/CodeQL interaction)
+  BUILD_TYPE: Release
+
 jobs:
   analyze:
     name: Analyze (cpp)
@@ -26,15 +30,19 @@ jobs:
         uses: github/codeql-action/init@v4
         with:
           languages: cpp
+          build-mode: manual
           config: |
             paths-ignore:
               - libCacheSim-node
 
       - name: Install build dependencies
         run: bash scripts/install_dependency.sh
 
-      - name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+      - name: Configure CMake
+        run: cmake -G Ninja -B "${{ github.workspace }}/build" -DCMAKE_BUILD_TYPE="${{ env.BUILD_TYPE }}"
+
+      - name: Build
+        run: ninja -C "${{ github.workspace }}/build"
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v4