Suppress DefaultAzureCredential CodeQL (#23)

* Suppress DefaultAzureCredential CodeQL

* fix: name of GitHub Actions

* Update dist

Signed-off-by: Peng Liang <pengliang@microsoft.com>

---------

Signed-off-by: Peng Liang <pengliang@microsoft.com>
Co-authored-by: Peng Liang <pengliang@microsoft.com>

Author: tcx4c70

dist/index.js

@@ -80,7 +80,7 @@ const getHeaders = async (appConfigEndpoint: string) => {
 }
 
 const getToken = async (appConfigEndpoint: string) => {
-  const credential = new DefaultAzureCredential()
+  const credential = new DefaultAzureCredential() // CodeQL [SM05138] GitHub Actions will run in a clean environment each time, no one can inject malicious credentials.
   const token = await credential.getToken(`${appConfigEndpoint}/.default`)
   return token.token
 }