GHA/ci: try suppressing CodeQL warnings

Author: vszakats

.github/workflows/ci.yml

@@ -46,7 +46,7 @@ jobs:
     steps:
       # Use the CIFuzz job to test the repository.
       - name: Build Fuzzers
-        uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master  # zizmor: ignore[unpinned-uses]
+        uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master  # lgtm[actions/unpinned-tag] # zizmor: ignore[unpinned-uses]
         with:
           oss-fuzz-project-name: 'curl'
           dry-run: false
@@ -80,7 +80,7 @@ jobs:
       - name: Display extracted files
         run: ls -laR build-out/
       - name: Run Fuzzer ${{ matrix.fuzzer }}
-        uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master  # zizmor: ignore[unpinned-uses]
+        uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master  # lgtm[actions/unpinned-tag] # zizmor: ignore[unpinned-uses]
         with:
           oss-fuzz-project-name: 'curl'
           fuzz-seconds: 120
@@ -98,7 +98,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Build Fuzzers
-        uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master  # zizmor: ignore[unpinned-uses]
+        uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master  # lgtm[actions/unpinned-tag] # zizmor: ignore[unpinned-uses]
         with:
           oss-fuzz-project-name: 'curl'
           dry-run: false