How GitHub uses CodeQL to secu... Note