Run scorecard in PRs and on workflow_dispatch (#2456)

Author: mathbunnyru

.github/workflows/scorecard.yml

@@ -13,15 +13,15 @@ on:
     - cron: "34 3 * * 3"
   push:
     branches: ["main"]
+  pull_request:
+  workflow_dispatch:
 
 permissions: {}
 
 jobs:
   analysis:
     name: Scorecard analysis
     runs-on: ubuntu-24.04
-    # `publish_results: true` only works when run from the default branch. conditional can be removed if disabled.
-    if: github.event.repository.default_branch == github.ref_name
     permissions:
       # Needed by actions/checkout and Scorecard to read the repository contents.
       contents: read
@@ -56,7 +56,9 @@ jobs:
           # For private repositories:
           #   - `publish_results` will always be set to `false`, regardless
           #     of the value entered here.
-          publish_results: true
+          #
+          # publish_results: true` only works when run from the default branch. conditional can be removed if disabled.
+          publish_results: ${{ github.event.repository.default_branch == github.ref_name }}
 
           # (Optional) Uncomment file_mode if you have a .gitattributes with files marked export-ignore
           # file_mode: git