The CodeQL init action YML file has a field called tools. The field is optional, but when specified, should reference a URL to the CodeQL tools:

We need clear documentation for our customers on how they might specify the tools field to point to a specific version of CodeQL. For example, if a new version of CodeQL breaks their workflow for some reason, they might want to downgrade to the last working CodeQL version until the issue is resolved.

Specifically, it would be nice to have documentation on how users can derive / construct the URL that needs to be specified for the tools field.