Fix: Use inline workflow for public repository (cannot access private reusable workflow)

Author: Glenn-Ewing

.github/workflows/codeql.yml

@@ -14,10 +14,49 @@ jobs:
       matrix:
         php-versions: [ '8.0', '8.1', '8.2', '8.3' ]
     name: Analyze PHP ${{ matrix.php-versions }}
-    uses: tithely/php-workflows/.github/workflows/codeql.yml@main
-    with:
-      github-event-name: ${{ github.event_name }}
-      php-version: ${{ matrix.php-versions }}
-      php-extensions: ""
-    secrets:
-      actions-access-token: ${{ secrets.ACTIONS_ACCESS_TOKEN }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+
+    steps:
+      - uses: actions/checkout@v3
+        name: Check Out Code
+
+      - name: Setup PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php-versions }}
+          tools: pecl
+          extensions: ""
+
+      - name: Validate composer.json and composer.lock
+        run: composer validate
+
+      - name: Setup Composer Access
+        run: composer config -g github-oauth.github.com ${{ secrets.GITHUB_TOKEN }}
+        
+      - name: Cache Composer packages
+        id: composer-cache
+        uses: actions/cache@v4
+        with:
+          path: vendor
+          key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-composer-
+
+      - name: Install dependencies
+        if: steps.composer-cache.outputs.cache-hit != 'true'
+        run: composer install --prefer-dist --no-progress --optimize-autoloader
+
+      - name: Perform CodeQL Analysis using Psalm
+        run: |
+          if [ "${{ github.event_name }}" == "pull_request" ]; then
+             vendor/bin/psalm --diff --output-format=sarif --report=psalm-report.sarif || true
+          else
+             vendor/bin/psalm --no-diff --output-format=sarif --report=psalm-report.sarif || true
+          fi
+        continue-on-error: true
+
+      - name: Upload SARIF report
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: psalm-report.sarif