- run on the actual default branch: the workflow only triggered on
main, but the default branch is dev, so pushes were never analyzed
- bump github/codeql-action from the deprecated v1/v2 to v4 and
actions/checkout from v2 (node12, disabled by GitHub) to v7
- fix the stale paths-ignore: the generated protos moved from
app/repositories/ln_impl/protos to app/lightning/impl/protos long
ago, and exclude them from the analysis itself via the init config
(trigger-level paths-ignore only affects when the workflow runs)
- also scan the GitHub Actions workflows (language: actions)
- drop the Autobuild step (a no-op for Python) and the template
boilerplate comments
- allow manual CodeQL runs via workflow_dispatch
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
