Bump github/codeql-action from 3.28.18 to 3.29.0 #4098

	name: "Continuous Integration"

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.run_id }}
	cancel-in-progress: true

	permissions: {}

	jobs:
	unit-tests:
	name: Unit tests
	runs-on: ubuntu-22.04
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	fetch-depth: 0
	persist-credentials: false

	- name: Set up Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- name: "basic checks"
	run: make ci

	- name: "upload coverage report"
	uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0
	with:
	files: cover.out
	flags: unittests
	name: codecov-tempo-operator
	fail_ci_if_error: false
	verbose: true
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

	security:
	name: Security
	runs-on: ubuntu-22.04
	permissions:
	actions: read
	security-events: write # write CodeQL alerts
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	persist-credentials: false

	- name: Initialize CodeQL
	uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
	with:
	languages: go

	- name: Autobuild
	uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3

	lint:
	name: Code standards (linting)
	runs-on: ubuntu-22.04
	steps:
	- name: Checkout
	uses: actions/checkout@v4
	with:
	persist-credentials: false

	- name: Lint
	uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6.5.1
	with:
	args: -v
	version: v1.61.0

Provide feedback