chore: bump ossf/scorecard-action from 2.0.6 to 2.3.1 (#89)

* chore: bump ossf/scorecard-action from 2.0.6 to 2.3.1

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.0.6 to 2.3.1.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@99c5375...0864cf1)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update fossa.yml

Signed-off-by: John Kjell <john@testifysec.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: John Kjell <john@testifysec.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John Kjell <john@testifysec.com>

.github/workflows/fossa.yml

@@ -18,10 +18,10 @@ jobs:
         FOSSA_API_KEY: ${{ secrets.fossaApiKey }}
       runs-on: ubuntu-latest
       steps:
-        - if: ${{ env.FOSSA_API_KEY }} != ""
+        - if: ${{ env.FOSSA_API_KEY != '' }}
           name: "Checkout Code"
           uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-        - if: ${{ env.FOSSA_API_KEY }} != ""
+        - if: ${{ env.FOSSA_API_KEY != '' }}
           name: "Run FOSSA Scan"
           uses: fossas/fossa-action@f61a4c0c263690f2ddb54b9822a719c25a7b608f # v1.3.1
           with:

.github/workflows/scorecards.yml

@@ -55,7 +55,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # v2.0.6
+        uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
         with:
           results_file: results.sarif
           results_format: sarif