Merge pull request #237 from sandialabs/dependabot/github_actions/github-actions-dependencies-2a721ea8a2

chore(deps): Bump the github-actions-dependencies group with 2 updates

Author: jmgate

.github/workflows/continuous-integration.yml

@@ -83,7 +83,7 @@ jobs:
           egress-policy: audit
 
       - name: Conventional Commits
-        uses: taskmedia/action-conventional-commits@a708bda25c04fc82b2acd5eeeb88d97f9a19beb9 # v1.1.20
+        uses: taskmedia/action-conventional-commits@7187425c5d93949943dc61d26a0a5c83715086d9 # v1.1.22
         with:
           types: >
             build|chore|ci|docs|feat|fix|minor|patch|perf|style|refactor|test

.github/workflows/scorecard.yml

@@ -34,7 +34,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif