[UPDATE] (deps): Bump ossf/scorecard-action in /.github/workflows

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from dde01de2fdfb29acf692f25ffb46c10a6655057e to 0996de34f094a4ac9ff679ec4993bdd4feff3a1f.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@dde01de...0996de3)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/scorecard.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
       - name: "Run analysis"
-        uses: ossf/scorecard-action@dde01de2fdfb29acf692f25ffb46c10a6655057e  # v2.4.1
+        uses: ossf/scorecard-action@0996de34f094a4ac9ff679ec4993bdd4feff3a1f  # v2.4.1
         with:
           results_file: results.sarif
           results_format: sarif