fixed #13351 - codeql-analysis.yml: limit write
permissions to jobs
#14922
CI-unixish-docker.yml
on: pull_request
Matrix: build_cmake
Matrix: build_make