Bump ossf/scorecard-action to 2.4.4

[dkwon17]

What does this PR do?

Bumps ossf/scorecard-action to 2.4.4

What issues does this PR fix or reference?

Is it tested? How?

PR Checklist

• E2E tests pass (when PR is ready, comment /test v8-devworkspace-operator-e2e, v8-che-happy-path to trigger)
  • v8-devworkspace-operator-e2e: DevWorkspace e2e test
  • v8-che-happy-path: Happy path for verification integration with Che

Summary by CodeRabbit

• Chores
  • Updated the supply-chain security analysis workflow to use a newer analysis tool version.
  • No user-facing functionality or workflow behavior changed.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 0020d4f9-440c-4fba-b3e9-856fc751b135

📥 Commits

Reviewing files that changed from the base of the PR and between 970cecc and 4a68d60.

📒 Files selected for processing (1)

• .github/workflows/scorecard.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The Scorecard supply-chain security workflow updates its pinned ossf/scorecard-action revision from v2.1.2 to v2.4.4. No workflow logic, permissions, or other configuration changes.

Changes

Scorecard action update

Layer / File(s)	Summary
Update Scorecard action pin .github/workflows/scorecard.yml	The workflow updates ossf/scorecard-action from v2.1.2 to v2.4.4 using the new commit pin.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 4a68d

This updates the pinned Scorecard analysis action version without changing workflow behavior or permissions. No current merge-blocking risk is identified.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the exact dependency update from the changeset: ossf/scorecard-action to version 2.4.4.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dkwon17, rohanKanojia

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [dkwon17]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment