Update security_scorecard.yml

add pull request as trigger so we can see the checks run in our PR

.github/workflows/security_scorecard.yml

@@ -11,6 +11,8 @@ on:
   # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
   push:
     branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
 
 # Declare default permissions as read only.
 permissions: read-all