Consider GitHub code scanning

[Default setup](https://github.blog/2023-01-09-default-setup-a-new-way-to-enable-github-code-scanning/) is a new way to automatically set up code scanning on your repository, without the use of a .yaml file.