[HOTFIX] Removed hardening action from scorecards.yml

Author: reactive-firewall

.github/workflows/scorecard.yml

@@ -24,14 +24,11 @@ jobs:
       security-events: write
       # Needed for GitHub OIDC token if publish_results is true
       id-token: write
-
     steps:
       - name: "Checkout repository"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683  # v4.2.2
         with:
           persist-credentials: false
-      - name: Harden-Runner
-        uses: step-security/[email protected]
       - name: "Run analysis"
         uses: ossf/scorecard-action@83a1bb1ff6a010f9ab75ad12160fe70252c99b71  # v2.4.1
         with:
@@ -45,7 +42,6 @@ jobs:
           # If you are installing the action on a private repo, set it to `publish_results: false`
           # or comment out the following line.
           publish_results: true
-
       # Upload the results as artifacts (optional). Commenting out will disable
       # uploads of run results in SARIF format to the repository Actions tab.
       # https://docs.github.com/en/actions/advanced-guides/storing-workflow-data-as-artifacts
@@ -55,7 +51,6 @@ jobs:
           name: SARIF file
           path: results.sarif
           retention-days: 5
-
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
         uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88  # v3.27.5