ci(github-actions): bump the github-actions group with 2 updates (#307)

Bumps the github-actions group with 2 updates: [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog).


Updates `bridgecrewio/checkov-action` from 12.3017.0 to 12.3019.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@3495879...91151a7)

Updates `trufflesecurity/trufflehog` from 3.88.31 to 3.88.32
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Changelog](https://github.com/trufflesecurity/trufflehog/blob/main/.goreleaser.yml)
- [Commits](trufflesecurity/trufflehog@64e0449...a6a4aed)

---
updated-dependencies:
- dependency-name: bridgecrewio/checkov-action
  dependency-version: 12.3019.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.88.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/scans.yml

@@ -25,7 +25,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
-      - uses: bridgecrewio/checkov-action@3495879bc8cfc6c4593277ed904883b569c19572 # master
+      - uses: bridgecrewio/checkov-action@91151a7b3e2fe1f44086dfa19352f6c47f30654b # master
 
       - if: ${{ success() || failure() }}
         uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3
@@ -378,7 +378,7 @@ jobs:
         with:
           fetch-depth: (${{ github.event.pull_request.commits || 2 }} + 1)
 
-      - uses: trufflesecurity/trufflehog@64e04492ecd6f71441eab1fe874f57a9761fc1d6 # v3
+      - uses: trufflesecurity/trufflehog@a6a4aedd6b110021ddcd7c988132c3b96fb2a868 # v3
         with:
           extra_args: --results=verified,unknown