Remove false positive injection sink models for docker/build-push-action and step-security/harden-runner#21574

redsun82 wants to merge 3 commits intomaingithub/codeql:mainfrom

redsun82/actions/remove-harden-runner-false-positivegithub/codeql:redsun82/actions/remove-harden-runner-false-positiveCopy head branch name to clipboard