CodeQL on every commit (open-telemetry#13185)

Author: trask

.github/repository-settings.md

@@ -85,6 +85,13 @@ settings](https://github.com/open-telemetry/community/blob/main/docs/how-to-conf
 - Restrict updates: CHECKED
 - Restrict deletions: CHECKED
 
+## Branch protections
+
+### `main`, `release/*`, `v0.*`, `v1.*`, `cloudfoundry`
+
+- Restrict who can push to matching branches: CHECKED
+  - Restrict pushes that create matching branches: CHECKED
+
 ## Code security and analysis
 
 - Secret scanning: Enabled

.github/workflows/codeql-daily.yml

@@ -1,9 +1,9 @@
-name: CodeQL (daily)
+name: CodeQL
 
 on:
-  schedule:
-    # daily at 1:30 UTC
-    - cron: "30 1 * * *"
+  push:
+    branches:
+      - main
   workflow_dispatch:
 
 permissions: