GA: Legger til codeql scan av repo + rydding

.github/dependabot.yml

@@ -1,10 +1,10 @@
 version: 2
 registries:
-  fp-felles: # Gir tilgang til registre innad i nav med fp-felles som inngang (PATen bestemmer)
+  maven-github:
     type: maven-repository
     url: https://maven.pkg.github.com/navikt/fp-felles
     username: x-access-token
-    password: ${{ secrets.PAT }}
+    password: ${{ secrets.READER_TOKEN }}
 
 updates:
   - package-ecosystem: github-actions
@@ -15,7 +15,7 @@ updates:
   - package-ecosystem: maven
     directory: "/"
     registries:
-      - fp-felles
+      - maven-github
     schedule:
       interval: daily
     open-pull-requests-limit: 20

.github/workflows/build.yml

@@ -14,8 +14,6 @@ on:
       - 'CODEOWNERS'
       - 'docs/**'
       - '.github/*.yml'
-  schedule:
-    - cron: '0 4 * * 1'
 
 jobs:
   build-feature:

.github/workflows/codeql.yml

@@ -0,0 +1,19 @@
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ "master" ]
+  pull_request:
+    branches: [ "master" ]
+  schedule:
+    - cron: '0 0 * * 0,4'
+
+jobs:
+  codeql:
+   name: CodeQl
+   permissions:
+     actions: read
+     contents: read
+     security-events: write
+   uses: navikt/fp-gha-workflows/.github/workflows/codeql.yml@main
+   secrets: inherit