PHPLIB-1435: Integrate static analysis for releases

Author: alcaeus

.github/workflows/static-analysis.yml

@@ -12,6 +12,8 @@ on:
       - "v*.*"
       - "master"
       - "feature/*"
+    tags:
+      - "*"
 
 env:
   PHP_VERSION: "8.2"
@@ -60,11 +62,10 @@ jobs:
       - name: "Run Psalm"
         run: "vendor/bin/psalm --show-info=false --stats --output-format=github --threads=$(nproc) --report=psalm.sarif"
 
+      - name: "Upload sarif report"
+        uses: "github/codeql-action/upload-sarif@v3"
+        with:
+          sarif_file: psalm.sarif
+
       - name: "Run Rector"
         run: "vendor/bin/rector --ansi --dry-run"
-
-      - name: "Upload Psalm report"
-        uses: actions/upload-artifact@v4
-        with:
-          name: psalm.sarif
-          path: psalm.sarif