`githubActions.configs.codeScanning`

Workflow security defaults for CodeQL, SARIF upload, dependency review, and related code-scanning integrations.

Included rules

Fix legend:

Rule	Fix
R097 `no-codeql-autobuild-for-javascript-typescript`	—
R096 `no-codeql-javascript-typescript-split-language-matrix`	—
R099 `require-codeql-actions-read`	—
R113 `require-codeql-branch-filters`	—
R114 `require-codeql-category-when-language-matrix`	—
R100 `require-codeql-pull-request-trigger`	—
R101 `require-codeql-schedule`	—
R098 `require-codeql-security-events-write`	—
R091 `require-dependency-review-action`	—
R093 `require-dependency-review-fail-on-severity`	—
R092 `require-dependency-review-permissions-contents-read`	—
R094 `require-dependency-review-pull-request-trigger`	—
R102 `require-sarif-upload-security-events-write`	—
R103 `require-scorecard-results-format-sarif`	—
R104 `require-scorecard-upload-sarif-step`	—