security, dependency updates & code-scanning

[joshxyzhimself]

notes

• https://securitylab.github.com/

codeql

• https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning
• https://github.com/joshxyzhimself/modules/blob/master/.github/workflows/codeql-analysis.yml

dependabot

• https://github.com/github/docs/discussions/596
• https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates#versioning-strategy