build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 #10083

	name: "Code scanning - action"

	on:
	push:
	branches: [main]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [main]
	schedule:
	- cron: '0 10 * * 1'

	permissions:
	contents: read

	env:
	GOPROXY: https://proxy.golang.org/
	GO_VERSION: 1.23.2

	jobs:
	CodeQL-Build:
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false
	- uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
	with:
	# * Module download cache
	# * Build cache (Linux)
	path: \|
	~/go/pkg/mod
	~/.cache/go-build
	key: ${{ runner.os }}-${{ github.job }}-go-${{ hashFiles('**/go.sum') }}
	restore-keys: \|
	${{ runner.os }}-${{ github.job }}-go-
	- uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
	with:
	go-version: ${{ env.GO_VERSION }}
	cache: false
	# Initializes the CodeQL tools for scanning.
	- name: Initialize CodeQL
	uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
	with:
	languages: go
	# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
	- name: Autobuild
	uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0

Provide feedback