Improve the workflow

Author: ChrisGe4

.github/workflows/actionlint.yml

@@ -7,6 +7,10 @@ permissions:
   contents: read
   pull-requests: write
 
+concurrency:
+  group: actionlint-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   lint:
     runs-on: ubuntu-latest

.github/workflows/scorecard.yml

@@ -11,9 +11,12 @@ permissions:
 jobs:
   analyze:
     runs-on: ubuntu-latest
+    timeout-minutes: 20
     steps:
     - uses: actions/checkout@v4
       with:
+        # Checkout the base repository ref, not the PR's head commit
+        ref: ${{ github.event.pull_request.base.sha }}
         persist-credentials: false
     - name: 'Run Scorecard'
       uses: ossf/[email protected]