chore: add required status checks

Author: ArloL

.github/workflows/check-actions.yaml

@@ -66,7 +66,15 @@ jobs:
       run: |
         uvx zizmor --format sarif . > results.sarif
     - name: Upload SARIF file
-      uses: github/codeql-action/upload-sarif@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+      uses: github/codeql-action/upload-sarif@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
       with:
         category: zizmor
         sarif_file: results.sarif
+  required-status-check:
+    name: check-actions.required-status-check
+    needs:
+    - actionlint
+    - zizmor
+    runs-on: ubuntu-latest
+    steps:
+    - run: echo "Use this job as the required status check of this workflow"

.github/workflows/codeql-analysis.yaml

@@ -63,14 +63,21 @@ jobs:
         distribution: temurin
         java-version-file: .tool-versions
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+      uses: github/codeql-action/init@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
       with:
         languages: ${{ matrix.language }}
     - name: Autobuild
-      uses: github/codeql-action/autobuild@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+      uses: github/codeql-action/autobuild@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@014f16e7ab1402f30e7c3329d33797e7948572db # v4.31.3
+      uses: github/codeql-action/analyze@fdbfb4d2750291e159f0156def62b853c2798ca2 # v4.31.5
       with:
         category: "/language:${{matrix.language}}"
     - name: Make sure build did not change anything
       run: git diff --exit-code
+  required-status-check:
+    name: codeql-analysis.required-status-check
+    needs:
+    - analyze
+    runs-on: ubuntu-latest
+    steps:
+    - run: echo "Use this job as the required status check of this workflow"