Bump github/codeql-action from 2.3.5 to 2.3.6

Closes https://github.com/dart-lang/sdk/pull/52613

GitOrigin-RevId: 3e219be8276f6c53bd275e5a4c099d8ebf7b5194
Change-Id: Ife83be2afa860c4c4c6fd646df7c7e9036439b9c
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/307440
Reviewed-by: Devon Carew <devoncarew@google.com>
Commit-Queue: Devon Carew <devoncarew@google.com>
diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 49f5824..98a1cf9 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -51,6 +51,6 @@
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866
+        uses: github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4
         with:
           sarif_file: results.sarif