Chore(deps): bump github/codeql-action

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2d2f57ed3a96a5c55ea34a02d2787de24943ebea to 0337c4c06e7e00d0d6e64396c13b9dc18dd6d8c5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2d2f57e...0337c4c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 0337c4c06e7e00d0d6e64396c13b9dc18dd6d8c5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/scorecard.yml

@@ -41,6 +41,6 @@ jobs:
           results_file: results.sarif
           results_format: sarif
       - name: Upload to code scanning
-        uses: github/codeql-action/upload-sarif@2d2f57ed3a96a5c55ea34a02d2787de24943ebea # v3.29.0
+        uses: github/codeql-action/upload-sarif@0337c4c06e7e00d0d6e64396c13b9dc18dd6d8c5 # v3.29.0
         with:
           sarif_file: results.sarif