fix(ci): update Scorecard action to use GHCR

[matthyx]

The Scorecard workflow fails before checkout because the v2.4.0 action image on GCR cannot be pulled due to an upstream billing error: https://github.com/kubescape/node-agent/actions/runs/37273447517.

Update the action to v2.4.4, pinned to its full commit SHA, which pulls its image from GHCR. Existing workflow inputs remain compatible. This applies the same fix as kubescape/regolibrary#839.

Validation:

• actionlint .github/workflows/scorecard.yml passed.
• git diff --check passed.
• The replacement ghcr.io/ossf/scorecard-action:v2.4.4 image was successfully pulled locally while validating the equivalent regolibrary fix.

The Scorecard workflow runs on main after merge; the full workflow has not been rerun.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 1f966245-c295-44f9-a671-924482760d19

📥 Commits

Reviewing files that changed from the base of the PR and between b307f6b and 56c52d2.

📒 Files selected for processing (1)

• .github/workflows/scorecard.yml

 ________________
< CSI: Git Diff. >
 ----------------
  \
   \   (\__/)
       (•ㅅ•)
       / 　 づ

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}