Merge pull request #6821 from karmada-io/dependabot/github_actions/github/codeql-action-4

Bump github/codeql-action from 3 to 4

Author: karmada-bot

.github/workflows/ci-image-scanning-on-schedule.yml

@@ -69,7 +69,7 @@ jobs:
           cache: false
           vuln-type: 'os,library'
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: '${{ matrix.target }}:${{ matrix.karmada-version }}.trivy-results.sarif'
           ref: ${{steps.gen_git_info.outputs.ref}}

.github/workflows/ci-image-scanning.yaml

@@ -68,6 +68,6 @@ jobs:
           vuln-type: 'os,library'
           cache: false
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: 'trivy-results.sarif'