#5681 Update ossar-analysis.yml

[martgil]

This PR updates the ossar-analysis.yml file in .github/workflows/ by updating the github action to its most recent version.

Reference: https://github.com/FlowCrypt/flowcrypt-browser/new/master?filename=.github%2Fworkflows%2Fossar.yml&workflow_template=code-scanning%2Fossar

close #5681

---

Tests (delete all except exactly one):

• Does not need tests (refactor only, docs or internal changes)

---

To be filled by reviewers

I have reviewed that this PR... (tick whichever items you personally focused on during this review):

• addresses the issue it closes (if any)
• code is readable and understandable
• is accompanied with tests, or tests are not needed
• is free of vulnerabilities
• is documented clearly and usefully, or doesn't need documentation

[martgil]

Hello @sosnovsky, this is now ready for review. It's difficult to tackle a place without a map but I'm glad I have found the right root-cause.

You can double-check and ensure that this PR fixes the issue by noticing the time it takes for the OSSAR's push vs pull_request and it both finishes in 2 minutes mark.

Compare to other PR's OSSAR test results:

I believe its also better to limit the push checks to master for consistency. As for example, I do not see any codeQL security checks that runs on a pull request for both pull_request and push events at the time.

[martgil]

Ready for review. thank you!

[martgil]

Hello @sosnovsky I had to remove the "$default-branch" from the previous change as they we're meant to be placeholders only for someone who starts to create the GitHub action over GitHub's workflows configuration page - https://github.com/FlowCrypt/flowcrypt-browser/actions/new.

This is now ready for another review. Thanks!

[sosnovsky]

All good now, thanks!