chore(update-yara-x): checkout with octo-sts token (#1466)

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

Author: egibs

.github/workflows/update-yara-x.yaml

@@ -109,9 +109,6 @@ jobs:
             sum.golang.org:443
             tuf-repo-cdn.sigstore.dev:443
 
-      - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
       - name: Set up Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
@@ -126,6 +123,11 @@ jobs:
           scope: chainguard-dev/malcontent
           identity: update-yara-x
 
+      - name: Checkout code
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          token: ${{ steps.octo-sts.outputs.token }}
+
       - name: Run update script
         env:
           GH_TOKEN: ${{ steps.octo-sts.outputs.token }}