[new] Ensure top-level permissions are not set to write-all

[new] Tips depend on target shell and yours is unknown. Add a shebang or a 'shell' directive.

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744, github/codeql-action/init@49abf0ba24d0b7953cb586944e918a0b92074c80, github/codeql-action/autobuild@49abf0ba24d0b7953cb586944e918a0b92074c80, github/codeql-action/analyze@49abf0ba24d0b7953cb586944e918a0b92074c80. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

[new] Use 'cd ... || exit' or 'cd ... || return' in case cd fails.