workflows: fix broken CodeQL

.github/workflows/node-ci.yml

@@ -1,5 +1,4 @@
-# This workflow will do a clean install of node dependencies, build the source code and run tests across different versions of node
-# For more information see: https://help.github.com/actions/language-and-framework-guides/using-nodejs-with-github-actions
+# Workflow for linting, building, testing, CodeQL analysis, and reporting of code coverage
 
 name: Node.js CI
 
@@ -40,6 +39,20 @@ jobs:
         env:
           AUTH_JSON: ${{secrets.AUTH_JSON}}
 
+  code_ql:
+    runs-on: ubuntu-latest
+    name: CodeQL
+    needs: build
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/download-artifact@v2
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v1
+        with:
+          languages: javascript
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v1
+
   test:
     runs-on: ubuntu-latest
     strategy:

.github/workflows/npm-publish.yml

@@ -1,6 +1,3 @@
-# This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
-# For more information see: https://help.github.com/actions/language-and-framework-guides/publishing-nodejs-packages
-
 name: NPM publish
 
 on: