7.1.4 (2026-11-03) Bug Fixes ci: pin the scorecard actions to the commits their tags point at (#516) (75a4960), closes #512 #512