Also check GitHub actions with CodeQL and some other minor tweaks.

Author: dlemstra

.github/workflows/codeql-analysis.yml

@@ -57,3 +57,18 @@ jobs:
 
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v3
+
+  actions:
+    name: CodeQL analysis (GitHub Actions)
+    runs-on: ubuntu-24.04
+
+    steps:
+    - uses: actions/checkout@v5
+
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v3
+      with:
+        languages: actions
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v3

.github/workflows/windows-release.yml

@@ -53,8 +53,8 @@ jobs:
     runs-on: windows-2022
 
     permissions:
-      id-token: write
       contents: read
+      id-token: write
 
     strategy:
       fail-fast: false
@@ -238,8 +238,8 @@ jobs:
     runs-on: windows-2022
 
     permissions:
-      id-token: write
       contents: read
+      id-token: write
 
     strategy:
       fail-fast: false