WIP: Add additional CI checks

• Handle false report due to context.TODO()

.gitlab-ci.yml

@@ -63,4 +63,22 @@ build:
     - make
   artifacts:
     paths:
-      - gitlab-runner-do-monitor/
\ No newline at end of file
+      - gitlab-runner-do-monitor/
+
+# GitLab CI tools: https://docs.gitlab.com/ee/ci/examples/README.html
+code_quality:
+  image: docker:stable
+  variables:
+    DOCKER_DRIVER: overlay2
+  allow_failure: true
+  services:
+    - docker:stable-dind
+  script:
+    - export SP_VERSION=$(echo "$CI_SERVER_VERSION" | sed 's/^\([0-9]*\)\.\([0-9]*\).*/\1-\2-stable/')
+    - docker run
+        --env SOURCE_CODE="$PWD"
+        --volume "$PWD":/code
+        --volume /var/run/docker.sock:/var/run/docker.sock
+        "registry.gitlab.com/gitlab-org/security-products/codequality:$SP_VERSION" /code
+  artifacts:
+    paths: [gl-code-quality-report.json]