Hi Mike,

Node.js and cspell are not needed. I confirmed the GitHub workflow with them removed here:
Enable CodeQL · tianocore/edk2@ad62416 (github.com)

v3 has been sent with that change:
[PATCH v3 0/2] Enable Initial CodeQL Support (groups.io)

Thanks,
Michael