SEC-090: Automated trusted workflow pinning (2024-12-01) (#5293)

* Result of tsccr-helper -log-level=info gha update -latest .github/

* chore: Fix usage of slack-github-action

---------

Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com>

.github/workflows/security-scan.yml

@@ -79,7 +79,7 @@ jobs:
         repository: "$PWD"
 
     - name: Upload SARIF file
-      uses: github/codeql-action/upload-sarif@af56b044b5d41c317aef5d19920b3183cb4fbbec # codeql-bundle-v2.19.2
+      uses: github/codeql-action/upload-sarif@cbe18979603527f12c7871a6eb04833ecf1548c7 # codeql-bundle-v2.19.3
       with:
         sarif_file: results.sarif