fix: Run OpenSSF Scorecard only on default branch

[HofmeisterAn]

What does this PR do?

OpenSSF Scorecard failed on the main branch. This PR removes the on main push event.

Only the default branch develop is supported.

Why is it important?

-

Related issues

-

Summary by CodeRabbit

• Chores
  • Modified continuous integration workflow configuration to adjust when automated analysis is triggered on development branches.

[netlify]

✅ Deploy Preview for testcontainers-dotnet ready!

Name	Link
🔨 Latest commit	e1be96c
🔍 Latest deploy log	https://app.netlify.com/projects/testcontainers-dotnet/deploys/69ad79fadb4fd70008ddccc1
😎 Deploy Preview	https://deploy-preview-1657--testcontainers-dotnet.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 684b26fb-2e7e-4f88-ba84-01fd93c4575f

📥 Commits

Reviewing files that changed from the base of the PR and between ec6b50f and e1be96c.

📒 Files selected for processing (1)

• .github/workflows/scorecard-analysis.yml

---

Walkthrough

The GitHub Actions workflow configuration was updated to remove the main branch from the automated scorecard analysis trigger, leaving only the develop branch to activate the workflow on push events.

Changes

Cohort / File(s)	Summary
Workflow Configuration .github/workflows/scorecard-analysis.yml	Modified the push trigger branches from [ develop, main ] to [ develop ], removing automatic workflow execution on main branch pushes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A workflow refined with a hop and a bound,
Main branch removed, now develop's the crown,
One less trigger to dance, one less deployment to sound,
The scorecard hops gently through develop-land town! 🌱

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The description provides the WHAT and acknowledges the problem, but the WHY section is empty (marked with '-'), leaving the rationale unexplained.	Complete the WHY section by explaining why OpenSSF Scorecard should only run on the default branch, not on main.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main change: restricting OpenSSF Scorecard execution to the default branch by removing the main branch trigger.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch bugfix/run-openssf-only-on-default-branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}