propose: codeql security-extended suite

[0xEniola]

Add the CodeQL security-extended suite to the CodeQL workflow configuration.

The security-extended query suite consists of all the queries in the default query suite, with addition of queries with slightly lower precision and severity, although, relative to the default query suite, the security-extended suite may return a greater number of false positive code scanning results.

It will allow us to catch likely flaws in the codebase that we may have missed during development, and flaws that are not checked for with the default suite, hence, allowing for greater hardening of Suricata, and eradicating potential threats.

[inashivb]

Commit should say: codeql: add security-extended query.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (c3b3c11) 82.28% compared to head (392056c) 82.27%.

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #10258      +/-   ##
==========================================
- Coverage   82.28%   82.27%   -0.01%     
==========================================
  Files         977      977              
  Lines      271950   271950              
==========================================
- Hits       223784   223760      -24     
- Misses      48166    48190      +24     

Flag	Coverage Δ
fuzzcorpus	63.39% <ø> (-0.01%)	⬇️
suricata-verify	61.50% <ø> (-0.02%)	⬇️
unittests	62.81% <ø> (-0.01%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

[0xEniola]

Commit should say: codeql: add security-extended query.

OK!

Thank you.

[0xEniola]

Commit should say: codeql: add security-extended query.

should I just leave it at query? And not add suite?
Because it's not a query, it's a suite of queries.

[inashivb]

Commit should say: codeql: add security-extended query.

should I just leave it at query? And not add suite? Because it's not a query, it's a suite of queries.

Please add it then. :)