chore(actions): Add scan of Actions workflows by CodeQL (#2859)

* Add scan of Actions

Signed-off-by: Viacheslav Kudinov <[email protected]>

* Update .github/workflows/codeql.yml

Co-authored-by: Nick Floyd <[email protected]>

---------

Signed-off-by: Viacheslav Kudinov <[email protected]>
Co-authored-by: Nick Floyd <[email protected]>

Author: ViacheslavKudinov

.github/workflows/codeql.yml

@@ -11,7 +11,7 @@ on:
 
 jobs:
   analyze:
-    name: Analyze
+    name: Analyze (${{ matrix.language }})
     runs-on: ubuntu-latest
     permissions:
       actions: read
@@ -21,13 +21,20 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [ 'go' ]
+        include:
+        - language: actions
+          build-mode: none
+          queries: security-extended # can be 'default' (use empty for 'default'), 'security-and-quality', 'security-extended'
+        - language: go
+          build-mode: autobuild
+          queries: '' # will be used 'default' queries
 
     steps:
       - name: Checkout repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
+        if: matrix.language == 'go'
         with:
           go-version-file: 'go.mod'
           cache: true
@@ -37,6 +44,8 @@ jobs:
         uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
         with:
           languages: ${{ matrix.language }}
+          build-mode: ${{ matrix['build-mode'] }}
+          queries: ${{ matrix.queries }}
 
       - name: Autobuild
         uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2