build: update codeql

.github/workflows/codeql.yaml

@@ -1,24 +1,32 @@
+# Use https://app.stepsecurity.io/ to improve workflow security
 name: CodeQL Analysis
 
 on:
   push:
   pull_request:
   schedule:
-    - cron: '0 0 * * 0'
+    - cron: '0 10 * * 0'
+
+permissions:
+  contents: read
 
 jobs:
   CodeQL-Build:
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
     strategy:
       fail-fast: false
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
         with:
           languages: go
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3