Run builds only on push to master and pull requests

Author: garydgregory

.github/workflows/codeql-analysis.yml

@@ -14,7 +14,11 @@
 # limitations under the License.
 
 name: "CodeQL"
-on: [push, pull_request]
+on:
+  push:
+    branches:
+      - 'master'
+  pull_request: {}
 
 permissions:
   contents: read