Merge pull request #335 from moul/dependabot/github_actions/ossf/scorecard-action-2.1.0

chore(deps): bump ossf/scorecard-action from 1.1.2 to 2.1.0

Author: moul

.github/workflows/scorecards.yml

@@ -30,7 +30,7 @@ jobs:
         env:
           SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }}
         if: env.SCORECARD_READ_TOKEN != null
-        uses: ossf/scorecard-action@ce330fde6b1a5c9c75b417e7efc510b822a35564 # v1.0.4
+        uses: ossf/scorecard-action@937ffa90d79c7d720498178154ad4c7ba1e4ad8c # v1.0.4
         with:
           results_file: results.sarif
           results_format: sarif