[feat] add noDocker runners for CodeQL and Semgrep

scripts/runCodeQLNoDocker.sh

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+
+echo "Running CodeQL"
+
+benchmark_version=$(scripts/getBenchmarkVersion.sh)
+codeql_version=$($HOME/.local/bin/codeql/codeql --version -q)
+result_file="results/Benchmark_$benchmark_version-CodeQL-v$codeql_version.sarif"
+
+$HOME/.local/bin/codeql/codeql database create owasp-benchmark --language=java --threads=0
+
+$HOME/.local/bin/codeql/codeql database analyze owasp-benchmark java-code-scanning.qls --format=sarifv2.1.0 --threads=0 --output=$result_file
+
+rm -rf owasp-benchmark

scripts/runSemgrepNoDocker.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+echo "Running Semgrep"
+
+benchmark_version=$(scripts/getBenchmarkVersion.sh)
+semgrep_version=$(semgrep --version)
+result_file="results/Benchmark_$benchmark_version-Semgrep-v$semgrep_version.json"
+
+semgrep --config p/security-audit -q --json --include="src/main/java/org/owasp/benchmark/testcode/*.java" -o "$result_file" . > /dev/null