From bceef765f79f0c2b49edcbacc4cdfe706f6ae09c Mon Sep 17 00:00:00 2001
From: "tyriis-automation[bot]"
 <133711747+tyriis-automation[bot]@users.noreply.github.com>
Date: Fri, 20 Dec 2024 20:11:05 +0000
Subject: [PATCH] =?UTF-8?q?ci(github-action):=20update=20github/codeql-act?=
 =?UTF-8?q?ion=20(=20v3.27.9=20=E2=86=92=20v3.28.0=20)=20(#4188)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-authored-by: tyriis-automation[bot] <133711747+tyriis-automation[bot]@users.noreply.github.com>
---
 .github/workflows/run-trivy.yaml  | 2 +-
 .github/workflows/scorecards.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/run-trivy.yaml b/.github/workflows/run-trivy.yaml
index e53f87032..522878bf9 100644
--- a/.github/workflows/run-trivy.yaml
+++ b/.github/workflows/run-trivy.yaml
@@ -39,6 +39,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard.
       # https://github.com/github/codeql-action
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           sarif_file: trivy-results.sarif
diff --git a/.github/workflows/scorecards.yaml b/.github/workflows/scorecards.yaml
index 257b253bc..a2d8d03d4 100644
--- a/.github/workflows/scorecards.yaml
+++ b/.github/workflows/scorecards.yaml
@@ -81,6 +81,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard.
       # https://github.com/github/codeql-action
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae # v3.27.9
+        uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
         with:
           sarif_file: results.sarif