Actions: resolve TODOs from diff-informed patch

Author: asgerf

actions/ql/lib/codeql/actions/security/UntrustedCheckoutQuery.qll

@@ -72,9 +72,7 @@ private module ActionsMutableRefCheckoutConfig implements DataFlow::ConfigSig {
   }
 
   predicate observeDiffInformedIncrementalMode() {
-    // TODO(diff-informed): Manually verify if config can be diff-informed.
-    // actions/ql/lib/codeql/actions/security/UntrustedCheckoutQuery.qll:238: Flow call outside 'select' clause
-    none()
+    none() // The query selects the enclosing step containing the sink
   }
 }
 
@@ -129,9 +127,7 @@ private module ActionsSHACheckoutConfig implements DataFlow::ConfigSig {
   }
 
   predicate observeDiffInformedIncrementalMode() {
-    // TODO(diff-informed): Manually verify if config can be diff-informed.
-    // actions/ql/lib/codeql/actions/security/UntrustedCheckoutQuery.qll:273: Flow call outside 'select' clause
-    none()
+    none() // The query selects the enclosing step containing the sink
   }
 }