CodeQL CI need to be installed

[phuhung273]

Since AWS SDK Javascript, AWS CDK is one of the biggest consumer. Can we have CodeQL CI installed so that future change from the upstream is not blocked because of this package ? eg:

• feat(ec2): instance support passing IAM instance profile aws/aws-cdk#32073
  blocked by
• GHAS/CodeQL reporting missing input sanitization aws/aws-sdk-js-v3#6623
  blocked by
• GHAS/CodeQL reporting missing input sanitization #1447

[kuhe]

We aren't going to install codeQL at this time, since the issue is a false positive with CodeQL's detection as explained in aws/aws-sdk-js-v3#6623.