[UPDATE] (deps): Bump ossf/scorecard-action in /.github/workflows

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 405dced65a1dcc6bc335115002f0690b1f1e49bb to de386ed459e2f85111697f50fe076d0ea617a32f.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@405dced...de386ed)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: de386ed459e2f85111697f50fe076d0ea617a32f
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/scorecard.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
       - name: "Run analysis"
-        uses: ossf/scorecard-action@405dced65a1dcc6bc335115002f0690b1f1e49bb  # v2.4.1
+        uses: ossf/scorecard-action@de386ed459e2f85111697f50fe076d0ea617a32f  # v2.4.1
         with:
           results_file: results.sarif
           results_format: sarif