As it turns out that “code scanning” isn’t public, here’s the error message that github is putting up saying that meson temp build files are security problems:
build/meson-private/tmpzhj7u8eq/testfile.c:2 Test Poor global variable name 'i'. Prefer longer, descriptive names for globals (eg. kMyGlobalConstant, not foo). Rule ID cpp/short-global-name Description This rule finds global variables which have a name of length three characters or less. It is particularly important to use descriptive names for global variables. Use of a clear naming convention for global variables helps document their use, avoids pollution of the namespace and reduces the risk of shadowing with local variables.