⬆️ deps(github-actions): update getplumber/plumber action to v0.4.36

[Open-Source-Bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
getplumber/plumber	action	patch	v0.4.30 → v0.4.36	v0.4.37

---

Release Notes

getplumber/plumber (getplumber/plumber)

v0.4.36

Compare Source

✨ Features

• ci: Add --platform feature to integrate pushing of results per policy (d6c5d84)

🐛 Bug Fixes

• ci: bump Go toolchain to 1.26.6 for stdlib security fixes (73f5ebe)

👷 CI/CD

• release: pin v0.4.36 refs [skip ci] (77eb302)

v0.4.35

Compare Source

🔧 Chores

• deps: bump github.com/open-policy-agent/opa (f04befa)

👷 CI/CD

• release: pin v0.4.35 refs [skip ci] (3b308ff)

v0.4.34

Compare Source

🐛 Bug Fixes

• config: embed the shipped default in place (a27b4a5), closes #​405

👷 CI/CD

• release: pin v0.4.34 refs [skip ci] (d4bf27b)

v0.4.33

Compare Source

✨ Features

• identity: expose the finding-identity recipe and make job mean a job (e7af327), closes #​403

👷 CI/CD

• release: pin v0.4.33 refs [skip ci] (4a0c59d)

v0.4.32

Compare Source

🐛 Bug Fixes

• github: normalize SHA case and peel nested tag objects (fbfacde)
• github: resolve action pins that name an annotated tag object (4016170), closes #​401

⚡ Performance

• github: skip the tag object probe for refs that cannot be one (eb9c669)

🔧 Chores

• drop a stray worktree entry committed by mistake (82c947f)

📚 Documentation

• github: record that the fork blind spot now covers tag objects (4eeee96)

✅ Tests

• github: lock the collector-to-IR metadata handoff (ccfc59b)
• github: lock the zero-cost happy path for the tag object fallback (fae517e)

👷 CI/CD

• release: pin v0.4.32 refs [skip ci] (e84e2c0)

v0.4.31

Compare Source

✨ Features

• sarif: surface the issue code, doc link and stable alert identity in GHAS (74691c6), closes #​372

👷 CI/CD

• release: pin v0.4.31 refs [skip ci] (c75127f)

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At 10:00 PM through 11:59 PM and 12:00 AM through 06:59 AM (* 22-23,0-6 * * *)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.