Merge pull request #212 from kagenti/dependabot/github_actions/github/codeql-action-4.35.1

chore(deps): Bump github/codeql-action from 4.34.1 to 4.35.1

Author: evaline-ju

.github/workflows/scorecard.yaml

@@ -30,6 +30,6 @@ jobs:
           name: scorecard-results
           path: results.sarif
           retention-days: 30
-      - uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc  # v4
+      - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13  # v4
         with:
           sarif_file: results.sarif

.github/workflows/security-scans.yaml

@@ -36,7 +36,7 @@ jobs:
           exit-code: 0  # Informational — upstream dependency CVEs in community examples
           format: sarif
           output: trivy-results.sarif
-      - uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc  # v4
+      - uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13  # v4
         if: always()
         with:
           sarif_file: trivy-results.sarif
@@ -49,11 +49,11 @@ jobs:
       contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
-      - uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc  # v4
+      - uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13  # v4
         with:
           languages: python
           queries: security-extended
-      - uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc  # v4
+      - uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13  # v4
 
   hadolint:
     runs-on: ubuntu-latest