The following actions are not allowed to be used inside a required workflow: github/codeql-action/analyze@v3, github/codeql-action/init@v3
Reading GH Docs
CodeQL is not supported in required workflows because CodeQL requires configuration at the repository level.
Which generally is true, but in this case we're actually fine.