I think just using it locally in manual or ad-hoc senses is fine, but IIRC it can become tricky or at least a legal grey area if you commit code that automates using GPL developer tooling and/or pulls it into your development toolchain, e.g. via GitHub action or some other CI automation.
Disclaimer: Not a lawyer, this isn't legal advice.
The MISRA analysis seems neat -- It's GPLv3 from what the LICENSE suggests, does that cause problems when being used to scan proprietary code?