Introduce Code Analysis Tool

[severindellsperger]

As discussed at the SDC meetup, we should also introduce a code analysis tool to help write maintainable code.
It needs to be explored which options are best. A popular option is SonarQube, but there may be other open-source, free solutions available.
The best solution would be to include it in the CI/CD pipeline. It needs to be determined whether this is possible in the free version.

[severindellsperger]

Here are the listed tools hosted by CNCF, which could be supportive:
https://contribute.cncf.io/resources/services/hosted-tools/

[CsatariGergely]

Are we looking only for a linter (a tool enforcing certain coding ruler) or a static analyzer looking for security issues, a vulnerability analyzis tool or a license compliance tool?
Or all of the above :)