GitHub: Block Pull Request if Code Scanning Alerts Are Found - josh-ops