ci: pin Scorecards checkout action by commit (#1966)

Signed-off-by: Robert McConnell <robert@mcc0nnell.org>

Author: mcc0nnell

.github/workflows/scorecards-analysis.yaml

@@ -41,7 +41,7 @@ jobs:
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@v7   # 3.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1    # 7.0.1
         with:
           persist-credentials: false