chore: use correct hash for codeql-action v4.31.2

[andjordan]

Current hash is not from v4.31.2, but from a commit that is not part of a release yet

[Copilot]

Pull Request Overview

This PR updates the commit hash reference for the github/codeql-action v4.31.2 across multiple workflow files to use the correct SHA.

Key Changes:

• Updated the commit hash for codeql-action v4.31.2 from 8a06050a8c0348fb4738f28e0cfbb6727cf054ce to 0499de31b99561a6d14a36a5f662c2a54f91beee

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
.github/workflows/static-analysis.yml	Updated hash for both codeql-action/init and codeql-action/analyze actions
.github/workflows/security.yml	Updated hash for codeql-action/upload-sarif action
.github/workflows/linting-formatting.yml	Updated hash for codeql-action/upload-sarif action

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Test Results

28 tests  ±0   28 ✅ ±0   3s ⏱️ ±0s
 1 suites ±0    0 💤 ±0 
 1 files   ±0    0 ❌ ±0 

Results for commit 143d952. ± Comparison against base commit ba5a212.

[github-actions]

✅⚠️MegaLinter analysis: Success with warnings

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	6		0	0	0.28s
✅ CPP	clang-format	114	0	0	0	1.06s
✅ DOCKERFILE	hadolint	1		0	0	0.28s
✅ JSON	jsonlint	8		0	0	0.16s
✅ JSON	prettier	8	6	0	0	0.45s
⚠️ MARKDOWN	markdownlint	4	1	9	0	0.69s
✅ MARKDOWN	markdown-table-formatter	4	1	0	0	0.27s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	26.75s
✅ REPOSITORY	ls-lint	yes		no	no	0.06s
✅ REPOSITORY	secretlint	yes		no	no	1.31s
✅ REPOSITORY	syft	yes		no	no	1.15s
✅ REPOSITORY	trivy	yes		no	no	4.51s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.09s
✅ REPOSITORY	trufflehog	yes		no	no	3.46s
⚠️ SPELL	lychee	56		1	0	3.88s
✅ YAML	prettier	10	0	0	0	0.53s
✅ YAML	v8r	10		0	0	4.83s
✅ YAML	yamllint	10		0	0	0.34s

Detailed Issues

⚠️ SPELL / lychee - 1 error

[404] https://github.com/yourname/amp-cucumber-cpp-runner.git | Network error: Not Found
📝 Summary
---------------------
🔍 Total..........127
✅ Successful.....126
⏳ Timeouts.........0
🔀 Redirected.......0
👻 Excluded.........0
❓ Unknown..........0
🚫 Errors...........1

Errors in CONTRIBUTING.md
[404] https://github.com/yourname/amp-cucumber-cpp-runner.git | Network error: Not Found

⚠️ MARKDOWN / markdownlint - 9 errors

CHANGELOG.md:19 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:33 MD024/no-duplicate-heading Multiple headings with the same content [Context: "⚠ BREAKING CHANGES"]
CHANGELOG.md:37 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:51 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:62 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Chores"]
CHANGELOG.md:70 MD024/no-duplicate-heading Multiple headings with the same content [Context: "⚠ BREAKING CHANGES"]
CHANGELOG.md:74 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Features"]
CHANGELOG.md:99 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Bug Fixes"]
CHANGELOG.md:106 MD024/no-duplicate-heading Multiple headings with the same content [Context: "Chores"]

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx [email protected] --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,CPP_CLANG_FORMAT,DOCKERFILE_HADOLINT,JSON_JSONLINT,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_GIT_DIFF,REPOSITORY_GRYPE,REPOSITORY_LS_LINT,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud