Bump the github-actions group with 2 updates #560

	---
	name: Reporting

	on:
	push:
	branches:
	- release-0.15
	- release-*

	permissions: {}

	jobs:
	unit-coverage:
	name: Go Unit Test Coverage
	if: github.repository_owner == 'submariner-io'
	runs-on: ubuntu-latest
	steps:
	- name: Check out the repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
	with:
	fetch-depth: 0

	- name: Run Go unit tests
	run: make unit

	- name: Run SonarScan, upload Go test results and coverage
	uses: sonarsource/sonarcloud-github-action@383f7e52eae3ab0510c3cb0e7d9d150bbaeab838
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

	vulnerability-scan:
	name: Vulnerability Scanning
	if: github.repository_owner == 'submariner-io'
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- name: Check out the repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
	- name: Run Anchore vulnerability scanner
	uses: anchore/scan-action@869c549e657a088dc0441b08ce4fc0ecdac2bb65
	id: scan
	with:
	path: "."
	fail-build: false
	- name: Show Anchore scan SARIF report
	run: cat ${{ steps.scan.outputs.sarif }}
	- name: Upload Anchore scan SARIF report
	uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88
	with:
	sarif_file: ${{ steps.scan.outputs.sarif }}

Provide feedback