GHA/dependabot: minor tidy-up #758

	# Copyright (C) Daniel Stenberg, <[email protected]>, et al.
	#
	# SPDX-License-Identifier: curl

	name: 'CodeQL'

	'on':
	push:
	branches:
	- master
	pull_request:
	# The branches below must be a subset of the branches above
	branches:
	- master
	schedule:
	- cron: '0 0 * * 4'

	concurrency:
	group: ${{ github.workflow }}-${{ github.event.pull_request.number \|\| github.sha }}
	cancel-in-progress: true

	permissions: {}

	jobs:
	gha_python:
	name: 'GHA and Python'
	runs-on: ubuntu-latest
	permissions:
	security-events: write # To create/update security events
	steps:
	- uses: actions/checkout@v5
	with:
	persist-credentials: false

	- name: 'initialize'
	uses: github/codeql-action/init@v4
	with:
	languages: actions, python
	queries: security-extended

	- name: 'perform analysis'
	uses: github/codeql-action/analyze@v4

	c:
	name: 'C'
	runs-on: ubuntu-latest
	permissions:
	security-events: write # To create/update security events

	steps:
	- uses: actions/checkout@v5
	with:
	persist-credentials: false

	- name: 'initialize'
	uses: github/codeql-action/init@v4
	with:
	languages: cpp
	build-mode: manual
	trap-caching: false
	queries: security-extended

	- name: 'install libcurl'
	run: \|
	sudo rm -f /etc/apt/sources.list.d/microsoft-prod.list
	sudo apt-get -o Dpkg::Use-Pty=0 update
	sudo rm -f /var/lib/man-db/auto-update
	sudo apt-get -o Dpkg::Use-Pty=0 install \
	libcurl4-openssl-dev

	- name: 'build'
	run: \|
	cmake -B bld -DTRURL_MANUAL=OFF
	cmake --build bld

	- name: 'perform analysis'
	uses: github/codeql-action/analyze@v4

Provide feedback