ci(github-action): update ossf/scorecard-action action to v2.3.3 (#87) #257

	# This workflow will build a .NET project
	# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-net

	name: .NET

	on:
	push:
	branches: [ "main" ]
	pull_request:
	branches: [ "main" ]

	env:
	DOTNET_GENERATE_ASPNET_CERTIFICATE: false
	DOTNET_NOLOGO: true
	DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true

	permissions:
	contents: read

	jobs:
	build:

	runs-on: ubuntu-latest

	steps:
	- name: 🛡️ Harden Runner
	uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
	with:
	egress-policy: audit

	- name: 🛒 Checkout
	uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
	with:
	fetch-depth: 0

	- name: 🧰 Setup .NET
	uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
	with:
	dotnet-version: 8.0.x

	- name: 🗃️ Setup NuGet cache
	uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
	with:
	path: ~/.nuget/packages
	key: ${{ runner.os }}-nuget-${{ hashFiles('*/.csproj', '*/.props') }}
	restore-keys: ${{ runner.os }}-nuget-

	- name: 📥 Restore dependencies
	run: dotnet restore

	- name: 🏗️ Build
	run: dotnet build --no-restore

	- name: ✅ Test
	run: dotnet test --no-build --verbosity normal /p:CollectCoverage=true /p:CoverletOutputFormat=opencover

	- name: ☂️ Upload coverage reports to Codecov
	uses: codecov/codecov-action@5ecb98a3c6b747ed38dc09f787459979aebb39be # v4.3.1
	env:
	CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}

Provide feedback