security: fix critical CodeQL unsafe quoting alerts

Change-Id: I88e068f2438900c476a41b071df0e2ce387d8779
Signed-off-by: EndlessSeeker <1766508902@qq.com>

Author: EndlessSeeker

.github/workflows/codeql-analysis.yaml

@@ -12,6 +12,10 @@
 name: "CodeQL"
 
 on:
+  push:
+    branches: [ 'main' ]
+  pull_request:
+    branches: [ 'main' ]
   schedule:
     - cron: '36 19 * * 6'
 
@@ -38,7 +42,7 @@ jobs:
 
       # step 2: Initializes the CodeQL tools for scanning.
       - name: "Initialize CodeQL"
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -50,7 +54,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: "Autobuild"
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v4
 
       # step 4
       # ℹ️ Command-line programs to run using the OS shell.
@@ -66,4 +70,4 @@ jobs:
 
       # step 5
       - name: "Perform CodeQL Analysis"
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v4

plugins/golang-filter/mcp-server/servers/higress/nginx-migration/Makefile

@@ -53,7 +53,6 @@ help:
 	@echo ""
 	@echo "目录结构:"
 	@echo "  cmd/standalone/       - 独立模式入口"
-	@echo "  internal/standalone/  - 独立模式实现"
+	@echo "  standalone/           - 独立模式实现"
 	@echo "  integration/          - Higress MCP 框架集成"
 	@echo "  tools/                - 共享核心逻辑"
-