Bump anchore/scan-action from 4 to 5 in /.github/workflows (#1095)

Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 4 to 5.
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/anchore/scan-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: anchore/scan-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/codeql-analysis.yml

@@ -65,7 +65,7 @@ jobs:
 
       - name: Generate report
         id: scan
-        uses: anchore/scan-action@v4
+        uses: anchore/scan-action@v5
         continue-on-error: true
         with:
           path: "."
@@ -80,7 +80,7 @@ jobs:
 
       - name: Scan PR source code
         id: scan-fixed
-        uses: anchore/scan-action@v4
+        uses: anchore/scan-action@v5
         if: always() && github.event_name == 'pull_request'
         continue-on-error: true
         with: