CI/CD: warnings

[mfranzke]

There are two warnings regarding the CI/CD scripts:

• codeql / Analyze (javascript)
  1 issue was detected with this workflow: Please specify an on.push hook so that Code Scanning can compare pull requests against the state of the base branch.
• scan-secrets / TruffleHog
  The set-output command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

This relates to the other repos as well.