fix(ci): run apt-get update in coverage ci. #1802

	name: Semgrep Checks
	on:
	pull_request:
	branches:
	- master
	- 'release/**'
	- 'maintainers/**'

	jobs:
	insecure-api:
	name: check-insecure-api
	runs-on: ubuntu-latest
	container:
	image: docker.io/semgrep/semgrep:1.85.0@sha256:b4c2272e0a2e59ca551ff96d3bbae657bd2b7356e339af557b27a96d9e751544
	steps:
	- name: Checkout Libs ⤵️
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0
	- name: Scan PR for insecure API usage 🕵️
	run: \|
	semgrep scan \
	--error \
	--metrics=off \
	--baseline-commit ${{ github.event.pull_request.base.sha }} \
	--config=./semgrep/insecure-api

	absolute-include-paths:
	name: check-absolute-include-paths
	runs-on: ubuntu-latest
	container:
	image: docker.io/semgrep/semgrep:1.85.0@sha256:b4c2272e0a2e59ca551ff96d3bbae657bd2b7356e339af557b27a96d9e751544
	steps:
	- name: Checkout Libs ⤵️
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	fetch-depth: 0
	- name: Scan PR for libs relateive include paths 🕵️
	run: \|
	semgrep scan \
	--error \
	--metrics=off \
	--baseline-commit ${{ github.event.pull_request.base.sha }} \
	--config=./semgrep/absolute-include-paths.yaml

Provide feedback