chore: address codeql warnings (#201776)

build/linux/debian/install-sysroot.js

@@ -34,6 +34,7 @@ function getElectronVersion() {
     return { electronVersion, msBuildId };
 }
 function getSha(filename) {
+    // CodeQL [SM04514] Hash logic cannot be changed due to external dependency, also the code is only used during build.
     const hash = (0, crypto_1.createHash)('sha1');
     // Read file 1 MB at a time
     const fd = fs.openSync(filename, 'r');