bump sca (#88)

Author: jackkav

.github/workflows/build-and-release.yaml

@@ -35,7 +35,7 @@ jobs:
       # Drift: Doesn't track any npm global or OS specific packages that involves scanning entire root file system.
       # (TODO): Produce OS specific SBOM to detect build time depdencies.
       - id: sca-project
-        uses: Kong/public-shared-actions/security-actions/sca@2f02738ecb1670f01391162e43fe3f5d4e7942a1 # v2.2.2
+        uses: Kong/public-shared-actions/security-actions/sca@f2b77d6aa619dbe3bfcc1ac4f99af7d02614e90a # v4.1.0
         with:
           dir: ${{ github.repository }}
           upload-sbom-release-assets: true

.github/workflows/build-lint-test.yaml

@@ -29,7 +29,7 @@ jobs:
       # Drift: Doesn't track any npm global or OS specific packages that involves scanning entire root file system.
       # (TODO): Produce OS specific SBOM to detect build time depdencies.
       - id: sca-project
-        uses: Kong/public-shared-actions/security-actions/sca@2f02738ecb1670f01391162e43fe3f5d4e7942a1 # v2.2.2
+        uses: Kong/public-shared-actions/security-actions/sca@f2b77d6aa619dbe3bfcc1ac4f99af7d02614e90a # v4.1.0
         with:
           dir: ${{ github.repository }}