add CodeQL badge

README.md

@@ -1,6 +1,6 @@
 # random-starred-repository
 
-[![Build Status](https://github.com/vintagesucks/random-starred-repository/workflows/Build/badge.svg)](https://github.com/vintagesucks/random-starred-repository/actions) [![Dependabot](https://badgen.net/badge/Dependabot/enabled/green?icon=dependabot)](https://dependabot.com/) [![XO code style](https://img.shields.io/badge/code_style-XO-5ed9c7.svg)](https://github.com/xojs/xo) [![npm](https://img.shields.io/npm/v/random-starred-repository)](https://www.npmjs.com/package/random-starred-repository)
+[![Build Status](https://github.com/vintagesucks/random-starred-repository/workflows/Build/badge.svg)](https://github.com/vintagesucks/random-starred-repository/actions) [![CodeQL](https://github.com/vintagesucks/random-starred-repository/actions/workflows/codeql-analysis.yml/badge.svg)](https://github.com/vintagesucks/random-starred-repository/actions/workflows/codeql-analysis.yml) [![Dependabot](https://badgen.net/badge/Dependabot/enabled/green?icon=dependabot)](https://dependabot.com/) [![XO code style](https://img.shields.io/badge/code_style-XO-5ed9c7.svg)](https://github.com/xojs/xo) [![npm](https://img.shields.io/npm/v/random-starred-repository)](https://www.npmjs.com/package/random-starred-repository)
 
 Returns a random repository starred by a user