Integrate our repository with a static analysis tool

GitHub has been making it easier to use a static analysis tool on repositories; see [this news](https://github.blog/2021-07-28-new-code-scanning-integrations-open-source-security-tools/) for an example. We may benefit from integrating with these tools to inspect our repository as well as pull requests.