ci(codeql): analyse github actions

Author: Fdawgs

.github/workflows/codeql.yml

@@ -25,8 +25,12 @@ jobs:
     build:
         name: CodeQL Analysis
         if: github.event.pull_request.draft == false
+        strategy:
+            matrix:
+                languages: ["actions", "javascript-typescript"]
         runs-on: ubuntu-latest
         permissions:
+            contents: read
             security-events: write
         steps:
             - name: Check out repo
@@ -38,8 +42,10 @@ jobs:
             - name: Initialise CodeQL
               uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
               with:
-                  languages: javascript-typescript
                   config-file: ./.github/codeql-config.yml
+                  languages: ${{ matrix.languages }}
 
             - name: Perform CodeQL analysis
               uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
+              with:
+                  category: "/language:${{matrix.language}}"