chore(deps): update github/codeql-action digest to afb54ba

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	digest	b7bf0a3 -> afb54ba

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.00%. Comparing base (1ad1929) to head (f1fbf48).

❗ Current head f1fbf48 differs from pull request most recent head dd45c40

Please upload reports for the commit dd45c40 to get more accurate results.

Additional details and impacted files

@@            Coverage Diff            @@
##               main      #96   +/-   ##
=========================================
  Coverage     60.00%   60.00%           
  Complexity       12       12           
=========================================
  Files             3        3           
  Lines            55       55           
=========================================
  Hits             33       33           
  Misses           22       22           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	1		0	0.01s
✅ COPYPASTE	jscpd	yes		no	1.5s
❌ REPOSITORY	checkov	yes		1	14.36s
✅ REPOSITORY	devskim	yes		no	2.36s
✅ REPOSITORY	dustilock	yes		no	0.01s
✅ REPOSITORY	gitleaks	yes		no	0.23s
✅ REPOSITORY	git_diff	yes		no	0.23s
✅ REPOSITORY	grype	yes		no	12.89s
✅ REPOSITORY	kics	yes		no	1.91s
✅ REPOSITORY	secretlint	yes		no	0.71s
✅ REPOSITORY	syft	yes		no	2.13s
✅ REPOSITORY	trivy	yes		no	4.09s
✅ REPOSITORY	trivy-sbom	yes		no	2.61s
✅ REPOSITORY	trufflehog	yes		no	6.73s
✅ SPELL	cspell	2		0	2.57s
✅ SPELL	lychee	1		0	0.04s
✅ YAML	prettier	1	1	0	0.38s
✅ YAML	v8r	1		0	2.03s
✅ YAML	yamllint	1		0	1.71s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by