unpinned-tag
This ensures that it will be in `security-extended`, but not the default suite.
experimental
codeql_pack