fix: pin ossf/scorecard-action to v2.4.3 (no v2 major tag exists)

Author: markuslf

.github/workflows/scorecard.yml

@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: 'Run analysis'
-        uses: 'ossf/scorecard-action@v2'
+        uses: 'ossf/scorecard-action@v2.4.3'
         with:
           results_file: 'results.sarif'
           results_format: 'sarif'