Bump the github-actions group with 9 updates (#1083)

dependabot[bot]

6 hours ago e46ff1164d13b910a2595b3bdc28bec2b3bdb81b

 .github/workflows/docker-scan.yml

@@ -37,7 +37,7 @@
      matrix:
        tag: [ 'latest', 'alpine' ]
    steps:
      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Scan openidentityplatform/opendj:${{ matrix.tag }} (Trivy)
        # unlike the build.yml gate, unfixed CVEs are reported too: surfacing them in
        # already-released images is the point of this workflow