chore(workflows/dependencies): update github/codeql-action digest to cf1bb45

Author: renovate[bot]

.github/workflows/scan-for-cves.yaml

@@ -37,7 +37,7 @@ jobs:
           [[ "$RUNNER_DEBUG" == 1 ]] && set -x
           eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
           ./.github/scripts/generate-sarif-reports.sh "charts/${{ matrix.chart }}"
-      - uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4
+      - uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4
         if: ${{ hashFiles('reports/*.sarif') != '' }}
         with:
           sarif_file: reports