Correct the scopes required for `--source-token`. by chrisgavin · Pull Request #35 · github/codeql-action-sync-tool