Make use of static analysis

[jvoisin]

• [x] coverity: done in d343ba0
• [x] clang-tidy: finds nothing.
• [x] codeql

  • /opt/hostedtoolcache/CodeQL/2.14.1/x64/codeql/codeql database finalize --finalize-dataset --threads=2 --ram=5907 /home/runner/work/_temp/codeql_databases/cpp CodeQL detected code written in C/C++ but could not process any of it. Review our troubleshooting guide at https://gh.io/troubleshooting-code-scanning/no-source-code-seen-during-build. Error: Encountered a fatal error while running "/opt/hostedtoolcache/CodeQL/2.14.1/x64/codeql/codeql database finalize --finalize-dataset --threads=2 --ram=5907 /home/runner/work/_temp/codeql_databases/cpp". Exit code was 32 and error was: CodeQL detected code written in C/C++ but could not process any of it. Review our troubleshooting guide at https://gh.io/troubleshooting-code-scanning/no-source-code-seen-during-build.