CHORE: CodeQL ADO pipeline task

eng/pipelines/pr-validation-pipeline.yml

@@ -7,6 +7,44 @@ trigger:
       - main
 
 jobs:
+- job: CodeQLAnalysis
+  displayName: 'CodeQL Security Analysis'
+  pool:
+    vmImage: 'ubuntu-latest'
+
+  steps:
+  - script: |
+      sudo apt-get update
+      sudo apt-get install -y build-essential cmake curl git python3 python3-pip python3-dev python3-venv unixodbc-dev
+    displayName: 'Install build dependencies for CodeQL'
+
+  - task: UsePythonVersion@0
+    inputs:
+      versionSpec: '3.13'
+      addToPath: true
+    displayName: 'Use Python 3.13 for CodeQL'
+
+  - script: |
+      python -m pip install --upgrade pip
+      pip install -r requirements.txt
+    displayName: 'Install Python dependencies for CodeQL'
+
+  - task: CodeQL3000Init@0
+    inputs:
+      Enabled: true
+    displayName: 'Initialize CodeQL'
+
+  # Build the C++ extension for CodeQL analysis
+  - script: |
+      cd mssql_python/pybind
+      chmod +x build.sh
+      ./build.sh
+    displayName: 'Build C++ extension for CodeQL analysis'
+
+  - task: CodeQL3000Finalize@0
+    condition: always()
+    displayName: 'Finalize CodeQL'
+
 - job: PytestOnWindows
   displayName: 'Windows x64'
   pool: