chore(deps): Pin grafana/alloy-dev Docker tag to cc8edd3

[renovate-sh-app]

This PR contains the following updates:

Package	Update	Change
grafana/alloy-dev	pinDigest	→ cc8edd3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: Branch creation - Between 06:00 AM and 10:59 AM, only on Monday ( * 6-10 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[github-actions]

TruffleHog Scan Results

Summary: Found 7 potential secrets (0 verified, 7 unverified)

• Possible secret (CloudflareApiToken) at internal/component/loki/source/cloudflare/tailer.go:3 → a1c1***4868
• Possible secret (PrivateKey) at internal/component/loki/source/syslog/internal/syslogtarget/syslogtarget_test.go:248 → ----***---
• Possible secret (PrivateKey) at internal/component/loki/source/syslog/internal/syslogtarget/syslogtarget_test.go:74 → ----***---
• Possible secret (PrivateKey) at internal/component/loki/source/syslog/internal/syslogtarget/syslogtarget_test.go:162 → ----***---
• Possible secret (PrivateKey) at internal/component/pyroscope/write/promhttp2/testdata/secrets.go:65 → ----***---
• Possible secret (PrivateKey) at internal/component/pyroscope/write/promhttp2/testdata/secrets.go:118 → ----***---
• Possible secret (PrivateKey) at internal/component/pyroscope/write/promhttp2/testdata/secrets.go:12 → ----***---

Review: Check if unverified secrets are false positives.

---

Ignoring False Positives:
To mark a false positive, add # trufflehog:ignore as an inline comment on the same line as the detected secret:

my_fake_secret = "AKIAIOSFODNN7EXAMPLE"  # trufflehog:ignore

This works for files that support line numbers (most source files). After adding the comment, push your changes and the scan will re-run.