Bump github/codeql-action from 2.2.4 to 2.2.5

Closes https://github.com/dart-lang/sdk/pull/51545

GitOrigin-RevId: 9ad66b3e2f0b16470d8e8200ac5ef841b884b933
Change-Id: I6d4a544cb169fb3a2859451c58b358c8366193d9
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/285640
Reviewed-by: Alexander Thomas <athom@google.com>
diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 016c8ac..35b8f81 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -51,6 +51,6 @@
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5
+        uses: github/codeql-action/upload-sarif@32dc499307d133bb5085bae78498c0ac2cf762d5
         with:
           sarif_file: results.sarif