Fix code injection warnings in check-codescanning-config internal Action
#5997
__upload-ref-sha-input.yml
on: pull_request
Matrix: Upload-sarif: 'ref' and 'sha' from inputs