As the repo is currently classified as Production, it needs to undergo CodeQL scanning. This will mean setting up some kind of regular pipeline that will trigger CodeQL.