merge dev to main: upgrade ossf/scorecard CI action (#1444)

Author: ymc9

.github/workflows/security-scorecard.yml

@@ -53,7 +53,7 @@ jobs:
                   token: ${{ secrets.BOT_TOKEN || github.token }} # Bot Token is a PAT for a automation account.
 
             - name: 'Run analysis'
-              uses: ossf/scorecard-action@v2.1.2
+              uses: ossf/scorecard-action@v2.3.3
               with:
                   results_file: results.sarif
                   results_format: sarif