Semgrep integration

[lool]

Semgrep was mentioned a couple of times as a static analysis tool. We should research how to integrate it properly in make check and workflow checks, and also address any reported issues.

It seems there's integration with a portal to create initial rules for semgrep, hence I didn't get the chance to get this fully working yet.