ci: update CodeQL workflow

Author: sjinks

.github/workflows/codeql.yml

@@ -2,18 +2,19 @@ name: CodeQL
 
 on:
   push:
-    branches: 
+    branches:
       - master
   pull_request:
     branches:
       - master
   schedule:
-    - cron: '7 23 * * 3'
+    - cron: '7 23 * * 4'
+  workflow_dispatch:
 
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 60
     permissions:
       security-events: write
@@ -24,6 +25,7 @@ jobs:
       matrix:
         language:
           - c-cpp
+          - actions
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
@@ -37,6 +39,7 @@ jobs:
             motd.ubuntu.com:443
             objects.githubusercontent.com:443
             packages.microsoft.com:443
+            release-assets.githubusercontent.com:443
 
       - name: Check out code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2