build(deps): bump actions/dependency-review-action from 4.3.2 to 4.3.4 #37

	# 是一个快速、开源的静态分析工具，用于在编辑、提交和 CI 时查找错误并执行代码标准

	name: Semgrep
	on:
	workflow_dispatch: {}
	pull_request: {}
	push:
	branches:
	- master
	paths:
	- .github/workflows/semgrep.yml
	#schedule:
	# # random HH:MM to avoid a load spike on GitHub Actions at 00:00
	# - cron: '17 6 * * *'

	jobs:
	semgrep:
	name: semgrep/ci
	runs-on: ubuntu-22.04
	env:
	SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}
	container:
	image: returntocorp/semgrep
	steps:
	- uses: actions/checkout@v4.1.7
	- run: semgrep ci

Provide feedback