chore(deps): update ossf/scorecard-action action to v2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
ossf/scorecard-action	action	major	v1.1.2 -> v2.0.6

---

Release Notes

ossf/scorecard-action

v2.0.6

Compare Source

What's Changed

• Fix - Broken dockerfile by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/979

Full Changelog: ossf/scorecard-action@v2.0.5...v2.0.6

v2.0.5

Compare Source

What's Changed

• Remove trailing space from example by @​jamacku in https://github.com/ossf/scorecard-action/pull/955
• 🌱 Bump actions/cache from 3.0.8 to 3.0.10 by @​dependabot in https://github.com/ossf/scorecard-action/pull/956
• 🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 by @​dependabot in https://github.com/ossf/scorecard-action/pull/957
• 🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/958
• 🌱 Bump debian from 5cf1d98 to b46fc4e by @​dependabot in https://github.com/ossf/scorecard-action/pull/959
• 🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/962
• 🌱 Upgrade to go 1.19 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/961
• 🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/967
• 🌱 Bump golang from c2a98a5 to b850621 by @​dependabot in https://github.com/ossf/scorecard-action/pull/966
• 🌱 Bump golang from b850621 to 25de7b6 by @​dependabot in https://github.com/ossf/scorecard-action/pull/968
• New release for Scorecard v4.8.0 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/969

New Contributors

• @​jamacku made their first contribution in https://github.com/ossf/scorecard-action/pull/955

Full Changelog: ossf/scorecard-action@v2.0.4...v2.0.5

v2.0.4

Compare Source

Fixes #​856

What's Changed

• 🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/934
• feat: do not run signing on pull requests by @​laurentsimon in https://github.com/ossf/scorecard-action/pull/935
• 🌱 Bump debian from 11.4-slim to 11.5-slim by @​dependabot in https://github.com/ossf/scorecard-action/pull/936
• 🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/938
• 🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 by @​dependabot in https://github.com/ossf/scorecard-action/pull/941
• 🐛 Restore behavior of ignoring scorecard runtime errors by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/948
• 🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/950
• 🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/947
• 🌱 Bump github/codeql-action from 2.1.24 to 2.1.25 by @​dependabot in https://github.com/ossf/scorecard-action/pull/949
• 🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/942
• Create v2.0.4 patch by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/952

New Contributors

• @​spencerschrock made their first contribution in https://github.com/ossf/scorecard-action/pull/948

Full Changelog: ossf/scorecard-action@v2.0.3...v2.0.4

v2.0.3

Compare Source

Patch for fix in #​898

v2.0.2

Compare Source

Fixes https://github.com/ossf/scorecard-action/issues/895

v2.0.1

Compare Source

Fix for #​856

v2.0.0

Compare Source

What's Changed

• 🌱 Prepare for a pre-release of the Golang action by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/750
• 🌱 Bump github/codeql-action from 2.1.12 to 2.1.16 by @​dependabot in https://github.com/ossf/scorecard-action/pull/751
• 🌱 Bump debian from 11.3-slim to 11.4-slim by @​dependabot in https://github.com/ossf/scorecard-action/pull/749
• 🌱 Bump step-security/harden-runner from 1.4.3 to 1.4.4 by @​dependabot in https://github.com/ossf/scorecard-action/pull/646
• 🌱 Bump actions/setup-go from 3.2.0 to 3.2.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/748
• 🐛 Fix dependency conflicts in go.mod by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/771
• 🌱 Prepare for v2 beta1 release by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/766
• multi-repo-action: Note that tool is a work-in-progress by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/776
• 🐛 Fix intermittent failures in CI-Tests by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/778
• 🌱 Bump sigs.k8s.io/release-utils from 0.7.2 to 0.7.3 by @​dependabot in https://github.com/ossf/scorecard-action/pull/775
• 🌱 Bump actions/cache from 3.0.4 to 3.0.5 by @​dependabot in https://github.com/ossf/scorecard-action/pull/769
• 📖 Update README about the restrictions for scorecard-action:v2 by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/779
• 🌱 Bump github/codeql-action from 2.1.16 to 2.1.17 by @​dependabot in https://github.com/ossf/scorecard-action/pull/783
• 📖 Update instructions for Scorecard badge to README by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/785
• 🌱 Bump debian from f576b80 to a811e62 by @​dependabot in https://github.com/ossf/scorecard-action/pull/787
• 🌱 Bump github.com/ossf/scorecard/v4 from 4.4.0 to 4.5.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/786
• 🌱 Bump github/codeql-action from 2.1.17 to 2.1.18 by @​dependabot in https://github.com/ossf/scorecard-action/pull/788
• 🌱 Bump actions/cache from 3.0.5 to 3.0.6 by @​dependabot in https://github.com/ossf/scorecard-action/pull/789
• 🐛 Add request application/json request header by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/791
• Create a new release v2.0.0-alpha.1 by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/803
• 🌱 Bump actions/cache from 3.0.6 to 3.0.7 by @​dependabot in https://github.com/ossf/scorecard-action/pull/807
• Olivekl patch 1 by @​olivekl in https://github.com/ossf/scorecard-action/pull/809
• 🌱 Fix cosign vulnerability by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/812
• 🌱 Allow for publish URL override by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/811
• 🌱 Bump github.com/ossf/scorecard/v4 from 4.5.0 to 4.6.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/820
• 🌱 Bump step-security/harden-runner from 1.4.4 to 1.4.5 by @​dependabot in https://github.com/ossf/scorecard-action/pull/808
• cmd/installer: Cleanups (2/n) by @​justaugustus in https://github.com/ossf/scorecard-action/pull/833
• Update comments to allow for renovatebot updates by @​laurentsimon in https://github.com/ossf/scorecard-action/pull/834
• 🌱 Bump github.com/caarlos0/env/v6 from 6.9.3 to 6.10.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/839
• 🌱 Update actions/checkout requirement to 2541b12 by @​dependabot in https://github.com/ossf/scorecard-action/pull/835
• 🌱 Bump github.com/sigstore/cosign from 1.11.0 to 1.11.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/842
• 🌱 Bump github/codeql-action from 2.1.18 to 2.1.21 by @​dependabot in https://github.com/ossf/scorecard-action/pull/844
• 🌱 Bump actions/setup-go from 3.2.1 to 3.3.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/843
• 🌱 Bump debian from a811e62 to 68c1f6b by @​dependabot in https://github.com/ossf/scorecard-action/pull/840
• Fix workflow path in automatic creation of PR by @​RadoslavGatev in https://github.com/ossf/scorecard-action/pull/845
• 🌱 Bump actions/dependency-review-action from 310e0dd to 2.1.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/838
• 🌱 Bump actions/cache from 3.0.7 to 3.0.8 by @​dependabot in https://github.com/ossf/scorecard-action/pull/836
• 📖 Add docs for API by @​azeemshaikh38 in https://github.com/ossf/scorecard-action/pull/849
• 🌱 Bump github/codeql-action from 2.1.21 to 2.1.22 by @​dependabot in https://github.com/ossf/scorecard-action/pull/853
• 🌱 Included License by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/852
• 🌱 Release v2.0.0 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/854

New Contributors

• @​RadoslavGatev made their first contribution in https://github.com/ossf/scorecard-action/pull/845

Full Changelog: ossf/scorecard-action@v1.1.2...v2.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.