chore(deps): pin grafana/security-github-actions action to 35d1495

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

.github/workflows/org-required-trufflehog.yml

@@ -21,7 +21,7 @@ permissions:
 jobs:
   secret-scan:
     name: TruffleHog Secret Scan
-    uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@main
+    uses: grafana/security-github-actions/.github/workflows/reusable-trufflehog.yml@35d1495ba81c85e0b2908678f9fa4b50cd497872 # main
     with:
       # Fail on verified secrets - blocking mode
       fail-on-verified: "true"      # Block on verified secrets