Merge pull request #29 from maxmind/horgh/codeql

Do not run CodeQL on push

.github/workflows/codeql-analysis.yml

@@ -1,13 +1,13 @@
 name: "Code scanning - action"
 
 on:
-  push:
-    branches-ignore:
-      - 'dependabot/**'
   pull_request:
   schedule:
     - cron: '0 7 * * 6'
 
+permissions:
+  security-events: write # Used by this action.
+
 jobs:
   CodeQL-Build:
 
@@ -25,7 +25,7 @@ jobs:
     # the head of the pull request instead of the merge commit.
     - run: git checkout HEAD^2
       if: ${{ github.event_name == 'pull_request' }}
-      
+
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v3