[ci] add static analysis supported by scan-build