Pin (and upgrade) immutable-eligible action actions/upload-artifact to their semantic versions

Author: mrecachinas

.github/workflows/scorecard.yml

@@ -36,7 +36,7 @@ jobs:
           results_format: sarif
           publish_results: true
       - name: "Upload artifact"
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@4.4.3
         with:
           name: SARIF file
           path: results.sarif