Bump the github-actions group with 5 updates #585

	---
	name: Reporting

	on:
	push:
	branches:
	- release-0.17
	- release-*

	permissions: {}

	jobs:
	unit-coverage:
	name: Go Unit Test Coverage
	if: github.repository_owner == 'submariner-io'
	runs-on: ubuntu-latest
	steps:
	- name: Check out the repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
	with:
	fetch-depth: 0

	- name: Run Go unit tests
	run: make unit

	- name: Run SonarScan, upload Go test results and coverage
	uses: sonarsource/sonarcloud-github-action@02ef91109b2d589e757aefcfb2854c2783fd7b19
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
	SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

	vulnerability-scan:
	name: Vulnerability Scanning
	if: github.repository_owner == 'submariner-io'
	runs-on: ubuntu-latest
	permissions:
	security-events: write
	steps:
	- name: Check out the repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
	- name: Run Anchore vulnerability scanner
	uses: anchore/scan-action@abae793926ec39a78ab18002bc7fc45bbbd94342
	id: scan
	with:
	path: "."
	fail-build: false
	- name: Show Anchore scan SARIF report
	run: cat ${{ steps.scan.outputs.sarif }}
	- name: Upload Anchore scan SARIF report
	uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c
	with:
	sarif_file: ${{ steps.scan.outputs.sarif }}

Provide feedback