From a9a8c777bce6364c2a5d6c9140b6dc124b8be39b Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 9 Sep 2026 20:03:06 +0000
Subject: [PATCH] chore(deps): update github/codeql-action action to v4.38.0

---
 .github/workflows/scan.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 4440a5f..ed0b96d 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -87,7 +87,7 @@ jobs:
           output: trivy-${{ matrix.image.image-name }}.sarif
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
+        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
         if: ${{ steps.changes.outputs.needs_build == 'true' && github.event.sender.login != 'dependabot[bot]' }}
         with:
           sarif_file: trivy-${{ matrix.image.image-name }}.sarif