Add COR.INF controls

Signed-off-by: gearnode <bryan@frimin.fr>

controls/core/src/COR.SRC.002.enable_code_scanning.md

@@ -0,0 +1,35 @@
+---
+id: "COR.SRC.002"
+category: "core/src"
+revision-version: 1
+revision-date: "2024-01-07"
+estimate-time: "15m"
+necessity: "optional"
+frameworks:
+  - name: "soc2"
+    sections: ["CC4.1", "CC8.1"]
+---
+
+# Configure Code Scanning
+
+## Purpose
+
+It ensures that potential security flaws are detected early. This proactive
+approach strengthens your security posture and helps maintain high code quality.
+
+## Implementation
+
+### Github
+
+1. Go to the "Security" tab of your repository.
+2. Click on "Set up code scanning".
+3. Select "Set up this workflow" under "CodeQL Analysis".
+4. Review the YAML file and commit it to your repository.
+
+Code scanning will now run every time code is pushed to the repository, and
+results will appear in the Security tab.
+
+## Evidence
+
+- Screenshot of code scanning results from Security tab
+- Sample of resolved security alerts