ci: Use Qodana recommended starting point

.github/workflows/qodana.yml

@@ -1,21 +1,22 @@
 name: Qodana Scan
-
 on:
-  push:
-    tags-ignore:
-      - '**'
+  workflow_dispatch:
   pull_request:
+  push:
 
 jobs:
   qodana:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      checks: write
     steps:
       - uses: actions/checkout@v3
         with:
-          fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}  # to check out the actual pull request commit, not the merge commit
+          fetch-depth: 0  # a full history is required for pull request analysis
       - name: 'Qodana Scan'
         uses: JetBrains/[email protected]
         env:
-          QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }}
-        with:
-          use-caches: true
+          QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }} # read the steps about it below