GitHub codeql-action

• CVE-2025-24362 High 7.1 CodeQL GitHub Action failed workflow writes GitHub PAT to debug artifacts 1.2%
• CVE-2021-32638 Medium 4.4 CodeQL runner: Command-line options that make GitHub access tokens visible to other processes are now deprecated 0.4%