containerize codeql

Author: patricklodder

.github/workflows/codeql-analysis.yml

@@ -6,10 +6,12 @@ on:
     branches:
       - '*-dev'
       - '*-maint'
+      - 'master'
   pull_request:
     # The branches below must be a subset of the branches above
     branches:
-      - '*-dev'
+      - '*-dev
+      - 'master'
     paths-ignore:
       - '**/*.md'
       - '**/*.txt'
@@ -22,6 +24,7 @@ jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-24.04
+    container: ubuntu:20.04
     permissions:
       actions: read
       contents: read
@@ -40,7 +43,7 @@ jobs:
     - name: Update system
       run: |
         sudo apt-get update --yes
-        sudo apt-get install build-essential libtool autotools-dev automake pkg-config bsdmainutils --yes
+        sudo apt-get install build-essential libtool autotools-dev automake pkg-config bsdmainutils python3 --yes
 
     - name: Dependency cache
       uses: actions/cache@v4