feat: use reusable workflow

.github/workflows/codeql-scan.yaml

@@ -4,25 +4,5 @@ on: [push, pull_request]
 
 jobs:
   codeql-scan:
-    runs-on: ubuntu-latest
-
-    permissions:
-      security-events: write
-      actions: read
-      contents: read
-
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
-      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
-        # with:
-        #   languages: go, javascript, csharp, python, cpp, java
-
-      # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
-      # If this step fails, then you should remove it and run the build manually (see below).
-      # - name: Autobuild
-      #   uses: github/codeql-action/autobuild@v2
-
-      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+    name: CodeQL Scan
+    uses: uc-cdis/.github/.github/workflows/codeql-scan.yaml@feat/codeql-scan