github: Code scanning default setup bypasses GitHub Actions policy blocks

GitHub changed code scanning’s default setup so it will run even when an organization enforces restrictive GitHub Actions policies that normally prevent certain workflows from running. Previously those policies could block the code scanning default setup.

• Source: GitHub