You manage GitHub Enterprise repositories that store C# code. You need to enable CodeQL scanning across the repositories. What should you do?

To enable CodeQL scanning, you must push a GitHub Actions workflow to each repository. This workflow defines the CodeQL analysis steps, including when it runs (e.g., on push or pull request) and what languages to scan. GitHub Actions is the automation platform that executes CodeQL scans. Enabling Dependabot security updates or alerts is incorrect because Dependabot focuses on dependency vulnerabilities and outdated dependencies, not static code analysis for custom code vulnerabilities, which is CodeQL's purpose. Configuring a required GitHub Actions workflow is a good practice for enforcement but doesn't enable CodeQL scanning itself; the workflow file must first exist in the repository.