ci: apply OSSF Scorecard security best practices#25

ctcpip merged 1 commit intojshttp:masterjshttp/compressible:masterfrom

UlisesGascon:scorecardUlisesGascon/compressible:scorecardCopy head branch name to clipboard