chore: integrate clang-tidy for static code analysis via CMake and CI workflows

Author: FridayCandour

.clang-tidy

@@ -0,0 +1,20 @@
+# .clang-tidy
+---
+Checks: >
+  -*,
+  bugprone-*,
+  clang-analyzer-*,
+  misc-*,
+  modernize-*,
+  performance-*,
+  portability-*,
+  readability-*
+
+# Ensure we do not lint vendored dependency headers or test files with strict guidelines
+HeaderFilterRegex: '^src/(class|hydration|sha256)\.h$'
+
+WarningsAsErrors: >
+  bugprone-*,
+  clang-analyzer-*,
+  performance-*,
+  portability-*

.github/workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
       if: matrix.os == 'ubuntu-latest'
       run: |
         sudo apt-get update
-        sudo apt-get install -y libcurl4-openssl-dev
+        sudo apt-get install -y libcurl4-openssl-dev clang-tidy
 
     - name: Install Dependencies (Windows)
       if: matrix.os == 'windows-latest'
@@ -74,7 +74,7 @@ jobs:
           - os: ubuntu-latest
             install-deps: |
               sudo apt-get update
-              sudo apt-get install -y libcurl4-openssl-dev
+              sudo apt-get install -y libcurl4-openssl-dev clang-tidy
           - os: macos-latest
             install-deps: |
               brew install curl
@@ -163,7 +163,7 @@ jobs:
     - name: Install Dependencies
       run: |
         sudo apt-get update
-        sudo apt-get install -y libcurl4-openssl-dev
+        sudo apt-get install -y libcurl4-openssl-dev clang-tidy
 
     - name: Configure CMake
       run: cmake -B build -S . -DCMAKE_BUILD_TYPE=Debug -DARKILIAN_BUILD_EXAMPLES=ON
@@ -187,7 +187,7 @@ jobs:
     - name: Install Dependencies
       run: |
         sudo apt-get update
-        sudo apt-get install -y libcurl4-openssl-dev
+        sudo apt-get install -y libcurl4-openssl-dev clang-tidy
 
     - name: Configure (ASAN + UBSAN, tests ON)
       run: |
@@ -218,7 +218,7 @@ jobs:
     - name: Install Dependencies
       run: |
         sudo apt-get update
-        sudo apt-get install -y libcurl4-openssl-dev
+        sudo apt-get install -y libcurl4-openssl-dev clang-tidy
 
     - name: Configure (TSAN, tests ON)
       run: |

CMakeLists.txt

@@ -20,6 +20,15 @@ option(ARKILIAN_BUILD_STATIC "Build static library for embedded use" ON)
 option(ARKILIAN_BUILD_EXAMPLES "Build example programs" ON)
 option(ARKILIAN_BUILD_TESTS "Build test programs" OFF)
 
+# Find clang-tidy for static code analysis
+find_program(CLANG_TIDY_EXE NAMES clang-tidy)
+if(CLANG_TIDY_EXE)
+    message(STATUS "Found clang-tidy: ${CLANG_TIDY_EXE}")
+    set(CMAKE_C_CLANG_TIDY "${CLANG_TIDY_EXE}")
+else()
+    message(WARNING "clang-tidy not found. Static code analysis will be skipped.")
+endif()
+
 # Find CURL
 find_package(CURL REQUIRED)