Merge pull request #276 from apache/dependabot/github_actions/actions/upload-artifact-5.0.0

Bump actions/upload-artifact from 4.6.2 to 5.0.0

Author: garydgregory

.github/workflows/scorecards-analysis.yml

@@ -56,7 +56,7 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02    # 4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4    # 5.0.0
         with:
           name: SARIF file
           path: results.sarif