From f053bc3725fb85b354d7c224cc454776ef98dbcd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Wed, 26 Aug 2026 18:54:19 +0000
Subject: [PATCH] chore(deps): update github/codeql-action action to v4.37.9

---
 .github/workflows/scan.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index bcd57d9..9237a3d 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -87,7 +87,7 @@ jobs:
           output: trivy-${{ matrix.image.image-name }}.sarif
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         if: ${{ steps.changes.outputs.needs_build == 'true' && github.event.sender.login != 'dependabot[bot]' }}
         with:
           sarif_file: trivy-${{ matrix.image.image-name }}.sarif