github/workflow: add token config to codeql-action/init

.github/workflows/codeql.yml

@@ -1,38 +1,37 @@
-name: CodeQL
+rame: "CodeQL"
 
 on:
   push:
     branches:
-      - master
+      - "*"
   pull_request:
     branches:
       - master
   schedule:
-    - cron: '0 20 * * *'
+    # - cron: '0 20 * * *'
+    - cron: '22 11 * * 2'
 
 jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-20.04
 
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+
     strategy:
       fail-fast: false
 
     steps:
-    - name: Checkout code
-      uses: actions/checkout@main
-      with:
-        fetch-depth: 2
-
-    - name: Install Go
-      uses: actions/setup-go@main
-      with:
-        go-version: 1.16.x
+    - name: Checkout repository
+      uses: actions/checkout@v2
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@v1
       with:
-        languages: go
+        languages: 'go'
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v1