Bump github/codeql-action from 3.28.9 to 3.28.10 #22

	# SPDX-FileCopyrightText: 2022 Contributors to the rez project
	#
	# SPDX-License-Identifier: Apache-2.0

	name: copywrite
	on:
	pull_request:

	permissions: {}

	jobs:
	reuse:
	runs-on: ubuntu-latest
	permissions:
	contents: read

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	with:
	persist-credentials: false

	- uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
	with:
	python-version: 3.13

	- name: Install uv
	uses: astral-sh/setup-uv@4db96194c378173c656ce18a155ffc14a9fc4355 # v5.2.2

	- name: Check License Compliance
	run: uvx nox --default-venv-backend uv -s reuse
	env:
	# uv really wants to take control of what python it uses...
	# Force it to only use system pythons
	UV_PYTHON_PREFERENCE: only-system
	# When using nox with uv, it will try to automatically
	# install python using uv using "uv python install".
	# So tell uv that it can't do that. Nox will gracefully
	# handle the failure and fallback to the system python.
	UV_PYTHON_DOWNLOADS: '0'

Provide feedback