ci: bump ossf/scorecard-action to v2.4.4
Merged
MA
1mo ago+1+1+0123456789-1-1-0123456789
Closes PFM-7296
Summary
Upgrades ossf/scorecard-action from v2.4.0 to v2.4.4 in the Scorecard supply-chain security workflow.
v2.4.0 pulls its container image from gcr.io/openssf/scorecard-action, which now fails with a "billing not enabled" error because OpenSSF has wound down its Google Cloud infrastructure (ossf/scorecard#5208). The Scorecard analysis job fails at the image pull step before any analysis runs. v2.4.4 pulls the container from GitHub Container Registry and is the minimum version OpenSSF recommends after the migration.