Improve CodeQL scan

Author: offa

.github/workflows/codeql.yml

@@ -1,9 +1,16 @@
 name: codeql
 
 on:
+  push:
+  pull_request:
   schedule:
     - cron: '0 5 * * 3'
 
+permissions:
+  contents: read
+  pull-requests: read
+  security-events: write
+
 jobs:
   codeql:
     runs-on: ubuntu-latest