This is the earliest CodeQL version supported by GHES. Bumping to this version resolves some flaky tests caused by the "We still have not reached idleness" deadlock, as this deadlock is fixed in 2.4.5.
security-events: write
This is not necessary.
Ensure that all workflows are able to write security events.