build(deps): bump pypa/gh-action-pip-audit from 1.0.6 to 1.0.8

Bumps [pypa/gh-action-pip-audit](https://github.com/pypa/gh-action-pip-audit) from 1.0.6 to 1.0.8.
- [Release notes](https://github.com/pypa/gh-action-pip-audit/releases)
- [Commits](pypa/gh-action-pip-audit@v1.0.6...v1.0.8)

---
updated-dependencies:
- dependency-name: pypa/gh-action-pip-audit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/code-analysis.yml

@@ -51,7 +51,7 @@ jobs:
         uses: github/codeql-action/analyze@v2
 
       - name: Run pip audit
-        uses: pypa/[email protected].6
+        uses: pypa/[email protected].8
         continue-on-error: true
         with:
           inputs: requirements.txt requirements-dev.txt