ci: add a workflow to perform an ECLAIR analysis with a reduced set.

Introduce a workflow to run an analysis using the "first_analysis"
selection. This workflow can be adapted use other selections.

This workflow is based on the PoC from simhein.
Link: https://github.com/simhein/zephyr/blob/53bfddca6b47baab137d2c6f0b365e79033dfd97/.github/workflows/eclair_guideline_check.yml

Signed-off-by: Luca Ciucci <[email protected]>

Author: LucaCiucci

.github/workflows/eclair_guidelines_check.yaml

@@ -0,0 +1,59 @@
+name: "Eclair Zephyr Guideline Selection Check"
+on: push
+
+jobs:
+  Analyze:
+    runs-on: self-hosted
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.ref }}
+          path: zephyr
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: 3.11
+
+      - name: venv setup
+        working-directory: zephyr
+        run: |
+          python3 -m venv .venv
+          source .venv/bin/activate
+          pip install --upgrade pip
+
+      - name: west setup
+        working-directory: zephyr
+        run: |
+          source .venv/bin/activate
+          pip3 install west
+          git config --global user.email "[email protected]"
+          git config --global user.name "Your Name"
+          west init -l . || true
+          west update
+          west zephyr-export
+          west packages pip --install
+          west sdk install
+
+      - name: Build and analyze with ECLAIR
+        working-directory: zephyr
+        shell: bash
+        run: |
+          source .venv/bin/activate
+          west build -b nrf52dk/nrf52805 samples/basic/blinky --   \
+            -DZEPHYR_SCA_VARIANT=eclair -DECLAIR_RULESET_FIRST_ANALYSIS=ON \
+            -DECLAIR_SUMMARY_HTML=ON      \
+            -DECLAIR_REPORTS_SARIF=ON
+
+      - name: Upload ECLAIR artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: artifacts
+          path: zephyr/build/sca/eclair/
+
+      - name: Upload ECLAIR SARIF
+        uses: BUGSENG/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: zephyr/build/sca/eclair/reports.sarif
+          category: eclair-analysis