Improve CodeQL workflow

Author: andyone

.github/workflows/codeql.yml

@@ -6,7 +6,12 @@ on:
   pull_request:
     branches: [master]
   schedule:
-    - cron: '0 19 * * 1,3,5'
+    - cron: '0 3 * * */2'
+
+permissions:
+  security-events: write
+  actions: read
+  contents: read
 
 jobs:
   analyse:
@@ -15,7 +20,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v3
       with:
         fetch-depth: 2