From b557d84ce2e31e7d4521efe1ca52f590a0c125bb Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 8 Oct 2026 16:49:04 +0000
Subject: [PATCH] chore(deps): update github/codeql-action action to v4.38.3

---
 .github/workflows/scan.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 067558e..49035ac 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -87,7 +87,7 @@ jobs:
           output: trivy-${{ matrix.image.image-name }}.sarif
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         if: ${{ steps.changes.outputs.needs_build == 'true' && github.event.sender.login != 'dependabot[bot]' }}
         with:
           sarif_file: trivy-${{ matrix.image.image-name }}.sarif