Add repo_token to scorecard.yml

.github/workflows/scorecard.yml

@@ -36,7 +36,7 @@ jobs:
         # - you want to enable the Branch-Protection check on a *public* repository, or
         # - you are installing Scorecard on a *private* repository
         # To create the PAT, follow the steps in https://github.com/ossf/scorecard-action?tab=readme-ov-file#authentication-with-fine-grained-pat-optional.
-        # repo_token: ${{ secrets.SCORECARD_TOKEN }}
+        repo_token: ${{ secrets.SCORECARD_TOKEN }}
         publish_results: true
     - name: "Upload artifact"
       uses: actions/upload-artifact@v3