Bump the github-actions group with 2 updates (#422)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/build-test.yaml

@@ -45,7 +45,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Run Trivy vulnerability scanner in repo mode
-        uses: aquasecurity/[email protected].0
+        uses: aquasecurity/[email protected].1
         continue-on-error: true
         with:
           scan-type: "fs"
@@ -105,7 +105,7 @@ jobs:
         continue-on-error: true
 
       - name: Generate code coverage artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: code-coverage
           path: coverage.out
@@ -154,7 +154,7 @@ jobs:
             type=provenance,mode=max
 
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/[email protected].0
+        uses: aquasecurity/[email protected].1
         with:
           input: ./.oci-image
           format: "table"