Merge pull request #1233 from fluxcd/dependabot/github_actions/ci-451…

…6fd8e81

Bump the ci group across 1 directory with 3 updates

.github/workflows/backport.yaml

@@ -20,7 +20,7 @@ jobs:
  with:
  ref: ${{ github.event.pull_request.head.sha }}
  - name: Create backport PRs
- uses: korthout/backport-action@bd410d37cdcae80be6d969823ff5a225fe5c833f # v3.0.2
+ uses: korthout/backport-action@be567af183754f6a5d831ae90f648954763f17f5 # v3.1.0
  # xref: https://github.com/korthout/backport-action#inputs
  with:
  # Use token to allow workflows to be triggered for the created PR

.github/workflows/release.yml

@@ -92,7 +92,7 @@ jobs:
  mkdir -p config/release
  kustomize build ./config/crd > ./config/release/${{ env.CONTROLLER }}.crds.yaml
  kustomize build ./config/manager > ./config/release/${{ env.CONTROLLER }}.deployment.yaml
- - uses: anchore/sbom-action/download-syft@ab9d16d4b419c9d1a02df5213fa0ebe965ca5a57 # v0.17.1
+ - uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
  - name: Create release and SBOM
  id: run-goreleaser
  if: startsWith(github.ref, 'refs/tags/v')

.github/workflows/scan.yml

@@ -40,13 +40,13 @@ jobs:
  **/go.sum
  **/go.mod
  - name: Initialize CodeQL
- uses: github/codeql-action/init@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+ uses: github/codeql-action/init@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4
  with:
  languages: go
  # xref: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
  # xref: https://codeql.github.com/codeql-query-help/go/
  queries: security-and-quality
  - name: Autobuild
- uses: github/codeql-action/autobuild@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+ uses: github/codeql-action/autobuild@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4
  - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@429e1977040da7a23b6822b13c129cd1ba93dbb2 # v3.26.2
+ uses: github/codeql-action/analyze@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4