The source should be updated to include suppressions for CodeQL violations that are deemed to be safe to use. cc @keegan-caruso