chore(deps): bump google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml from 2.3.5 to 2.3.8 (#125)

Bumps
[google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action)
from 2.3.5 to 2.3.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml's
releases</a>.</em></p>
<blockquote>
<h2>v2.3.8</h2>
<h2>What's Changed</h2>
<p>This updates OSV-Scanner to v2.3.8.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/osv-scanner-action/compare/v2.3.5...v2.3.8">https://github.com/google/osv-scanner-action/compare/v2.3.5...v2.3.8</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google/osv-scanner-action/commit/9a498708959aeaef5ef730655706c5a1df1edbc2"><code>9a49870</code></a>
Update unified workflow example to point to v2.3.8 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/3adb4b14a2b0623876d18d863a498b785fb3752d"><code>3adb4b1</code></a>
Update reusable workflows to point to v2.3.8 actions</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/8dc09193bb540e09b23da07ad7e30bd33bf87018"><code>8dc0919</code></a>
&quot;Update actions to use v2.3.8 osv-scanner image&quot;</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/43f380b8fc43a816831a9f5ee6fc91170809c7e9"><code>43f380b</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/125">#125</a>
from google/update-to-v2.3.6</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/dcf4ddd504dac1027e5829c1d754e4ec009ded5d"><code>dcf4ddd</code></a>
Update unified workflow example to point to v2.3.6 reusable
workflows</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/b9dbb7ef6f6fb8d0e762912b668d2c4c236090a3"><code>b9dbb7e</code></a>
Update reusable workflows to point to v2.3.6 actions</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/fe54858b54b6e367472aa1828429dfcf3c95aba6"><code>fe54858</code></a>
&quot;Update actions to use v2.3.6 osv-scanner image&quot;</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/eb5b619bb565d10623076caba5263750fde3c790"><code>eb5b619</code></a>
Merge pull request <a
href="https://redirect.github.com/google/osv-scanner-action/issues/100">#100</a>
from thomasleplus/main</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/9517144e5504957104c831530fe605bfdc71f353"><code>9517144</code></a>
feat: output results in reusable workflow</li>
<li><a
href="https://github.com/google/osv-scanner-action/commit/f17cd09224d6ef8be953fb49371e6bffb2dbf44a"><code>f17cd09</code></a>
Merge branch 'main' into main</li>
<li>Additional commits viewable in <a
href="https://github.com/google/osv-scanner-action/compare/c51854704019a247608d928f370c98740469d4b5...9a498708959aeaef5ef730655706c5a1df1edbc2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml&package-manager=github_actions&previous-version=2.3.5&new-version=2.3.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/osv-scanner.yml

@@ -39,7 +39,7 @@ jobs:
         ./
   scan-pr:
     if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
-    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@c51854704019a247608d928f370c98740469d4b5" # v2.2.1
+    uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@9a498708959aeaef5ef730655706c5a1df1edbc2" # v2.2.1
     with:
       # Example of specifying custom arguments
       scan-args: |-