CI: cleanups

.github/workflows/static-analyzer-clang.yml

@@ -0,0 +1,25 @@
+name: 'Static Analyzer - clang scan-build'
+
+on:
+  schedule: [cron: '20 5 * * 3'] # run weekly Wednesday 05:20 UTC
+  workflow_dispatch:
+
+jobs:
+  job-analyze-clang:
+    strategy:
+      fail-fast: false
+      matrix: {container: ['alpine:3.16','alpine:3.17','alpine:3.18','alpine:edge','i386/alpine:edge']}
+    name: ${{ format('Analyze {0}', matrix.container) }}
+    runs-on: ubuntu-latest
+    container: ${{ matrix.container }}
+    steps:
+      - name: ${{ format('Install packages {0}', matrix.container) }}
+        run: 'apk update && apk upgrade && apk add bash clang clang-analyzer cmake g++ git make'
+      - name: ${{ format('Check out UPX {0} source code', github.ref_name) }}
+        run: |
+          git clone --branch "$GITHUB_REF_NAME" --depth 1 https://github.com/upx/upx
+          git -C upx submodule update --init
+      - name: 'Perform clang scan-build Analysis Debug'
+        run: 'make -C upx build/extra/scan-build/debug'
+      - name: 'Perform clang scan-build Analysis Release'
+        run: 'make -C upx build/extra/scan-build/release'