It's the whole tag, we don't want to remove the `codeql-bundle-` prefix.
security-experimental
codeql-config.yml
.github/actions