Add supply chain queries for npm publish token usage and missing provenance#21621

david-wiggs wants to merge 3 commits intogithub:maingithub/codeql:mainfrom

david-wiggs:maindavid-wiggs/codeql:mainCopy head branch name to clipboard