ci(security): harden workflow dependencies and token permissions#4

bochkov-anton merged 2 commits intomainarcoris/pool:mainfrom

chore/scorecard-workflow-hardeningarcoris/pool:chore/scorecard-workflow-hardeningCopy head branch name to clipboard