Enable scan-build

Signed-off-by: pscott <scott.piriou@ledger.fr>

.github/workflows/ci-workflow.yml

@@ -82,6 +82,26 @@ jobs:
           name: ethereum_nanox
           path: ./ethereum_nanox.elf
 
+  scan-build:
+    name: Clang Static Analyzer
+    runs-on: ubuntu-latest
+
+    container:
+      image: ghcr.io/ledgerhq/ledger-app-builder/ledger-app-builder:latest
+
+    steps:
+      - uses: actions/checkout@v2
+
+      - name: Build with Clang Static Analyzer
+        run: |
+          make clean
+          scan-build --use-cc=clang -analyze-headers -enable-checker security -enable-checker unix -enable-checker valist -o scan-build --status-bugs make default
+      - uses: actions/upload-artifact@v2
+        if: failure()
+        with:
+          name: scan-build
+          path: scan-build
+
   jobs-e2e-tests:
     needs: [job_build_debug_nano_s, job_build_debug_nano_x]
     runs-on: ubuntu-latest