Add GitHub issue creation for security alerts

Author: elvin03

.github/workflows/codeql.yml

@@ -18,6 +18,16 @@ on:
     branches: [ "main" ]
   schedule:
     - cron: '34 20 * * 5'
+  workflow_dispatch:
+    inputs:
+      test_email:
+        description: 'Test email notification'
+        required: false
+        default: 'false'
+        type: choice
+        options:
+        - 'false'
+        - 'true'
 
 jobs:
   analyze:
@@ -102,6 +112,68 @@ jobs:
       with:
         category: "/language:${{matrix.language}}"
 
+    - name: Check for Security Issues
+      id: check-security
+      run: |
+        # Check if SARIF results contain any security findings
+        if [ -d "${{ github.workspace }}/.github/codeql-action/results" ]; then
+          SARIF_FILES=$(find "${{ github.workspace }}/.github/codeql-action/results" -name "*.sarif" -type f 2>/dev/null || true)
+          if [ -n "$SARIF_FILES" ]; then
+            FINDINGS_COUNT=$(jq -r '.runs[].results | length' $SARIF_FILES 2>/dev/null | awk '{sum+=$1} END {print sum+0}')
+            echo "findings_count=$FINDINGS_COUNT" >> $GITHUB_OUTPUT
+            if [ "$FINDINGS_COUNT" -gt 0 ]; then
+              echo "security_issues_found=true" >> $GITHUB_OUTPUT
+              echo "Found $FINDINGS_COUNT security issues"
+            else
+              echo "security_issues_found=false" >> $GITHUB_OUTPUT
+              echo "No security issues found"
+            fi
+          else
+            echo "security_issues_found=false" >> $GITHUB_OUTPUT
+            echo "No SARIF files found"
+          fi
+        else
+          echo "security_issues_found=false" >> $GITHUB_OUTPUT
+          echo "No CodeQL results directory found"
+        fi
+
+    - name: Create Security Issue on Findings
+      if: steps.check-security.outputs.security_issues_found == 'true' || github.event.inputs.test_email == 'true'
+      uses: actions/github-script@v7
+      with:
+        script: |
+          const title = `🚨 Security Issues Detected - ${context.payload.head_commit?.message || 'Latest commit'}`;
+          const body = `## Security Alert
+          
+          CodeQL analysis has detected **${{ steps.check-security.outputs.findings_count }}** security issue(s) in the codebase.
+          
+          ### Details:
+          - **Repository**: ${{ github.repository }}
+          - **Branch**: ${{ github.ref_name }}
+          - **Commit**: ${{ github.sha }}
+          - **Workflow Run**: [${{ github.run_number }}](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})
+          - **Language**: ${{ matrix.language }}
+          
+          ### Action Required:
+          Please review the security findings immediately:
+          - [View Security Tab](${{ github.server_url }}/${{ github.repository }}/security/code-scanning)
+          - [View Workflow Run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }})
+          
+          ### Assignees:
+          @elvin03 please review and address these security issues.
+          
+          ---
+          *This issue was automatically created by the CodeQL security workflow.*`;
+          
+          await github.rest.issues.create({
+            owner: context.repo.owner,
+            repo: context.repo.repo,
+            title: title,
+            body: body,
+            labels: ['security', 'automated', 'high-priority'],
+            assignees: ['elvin03']
+          });
+
     - name: Generate Security Report
       uses: rsdmike/github-security-report-action@v3.0.4
       with: