chore(actions)(deps): bump the actions group across 1 directory with 2 updates #112

Job	Run time
jscpd (duplication < 3% on touched code)	13s
Trivy (filesystem + container scan)	10s
SBOM (SPDX + CycloneDX)	11s
Gitleaks (secret scan)	11s
Semgrep (SAST)	41s
OSV-Scanner (SCA)	7s
	1m 33s

Provide feedback