The CodeQL repo settings weren't sticking, so I figured I'd check our config in as a workflow instead. --------- Signed-off-by: Jamil <jamilbk@users.noreply.github.com>