From 57d32f4b16c6e26b84c65824b1d9e51b24bccce4 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 24 Sep 2026 18:04:22 +0000
Subject: [PATCH] chore(deps): update github/codeql-action action to v4.38.2

---
 .github/workflows/scan.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
index 1bf53e1..067558e 100644
--- a/.github/workflows/scan.yml
+++ b/.github/workflows/scan.yml
@@ -87,7 +87,7 @@ jobs:
           output: trivy-${{ matrix.image.image-name }}.sarif
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         if: ${{ steps.changes.outputs.needs_build == 'true' && github.event.sender.login != 'dependabot[bot]' }}
         with:
           sarif_file: trivy-${{ matrix.image.image-name }}.sarif