Add cppcheck composite action and integrate into all workflows

Author: roshan-ku

.github/actions/analysis/cppcheck/action.yml

@@ -0,0 +1,22 @@
+#
+# BSD 3-Clause License
+# Copyright (C) 2026 Intel Corporation
+# SPDX-License-Identifier: BSD-3-Clause
+#
+name: 'cppcheck'
+description: 'Run cppcheck static analysis'
+
+runs:
+  using: composite
+  steps:
+    - name: cppcheck
+      shell: bash
+      run: |
+        REPORT_DIR="$HOME/static-analysis/${{ github.repository }}/${{ github.run_id }}"
+        mkdir -p "$REPORT_DIR"
+        cppcheck \
+          --enable=warning,style,performance,portability \
+          --std=c11 --force --inline-suppr \
+          --suppress=missingIncludeSystem \
+          -Iinclude src 2>&1 | tee "$REPORT_DIR/cppcheck-report.txt" || true
+        echo "cppcheck scan complete. Report saved to $REPORT_DIR/cppcheck-report.txt"

.github/actions/environment-check/action.yml

@@ -54,7 +54,7 @@ runs:
       run: |
         echo "===== Analysis Tools Check ====="
         MISSING=""
-        for TOOL in shellcheck; do
+        for TOOL in shellcheck cppcheck; do
           if command -v "$TOOL" &>/dev/null; then
             echo "  [OK] $TOOL ($(command -v "$TOOL"))"
           else

.github/workflows/ci.yml

@@ -45,6 +45,9 @@ jobs:
       - name: ShellCheck
         uses: ./.github/actions/analysis/shellcheck
 
+      - name: cppcheck
+        uses: ./.github/actions/analysis/cppcheck
+
       - name: Coverity Scan
         uses: ./.github/actions/analysis/coverity
 

.github/workflows/daily_build.yml

@@ -48,6 +48,9 @@ jobs:
       - name: ShellCheck
         uses: ./.github/actions/analysis/shellcheck
 
+      - name: cppcheck
+        uses: ./.github/actions/analysis/cppcheck
+
       - name: Coverity Scan
         uses: ./.github/actions/analysis/coverity
 

.github/workflows/pull_request.yml

@@ -48,6 +48,9 @@ jobs:
       - name: ShellCheck
         uses: ./.github/actions/analysis/shellcheck
 
+      - name: cppcheck
+        uses: ./.github/actions/analysis/cppcheck
+
       - name: Coverity Scan
         uses: ./.github/actions/analysis/coverity