Update scorecard.yml

Signed-off-by: Ryan Parman <rparman@northwood-labs.com>

Author: skyzyx

.github/workflows/scorecard.yml

@@ -40,6 +40,7 @@ jobs:
             objects.githubusercontent.com:443
             oss-fuzz-build-logs.storage.googleapis.com:443
             rekor.sigstore.dev:443
+            release-assets.githubusercontent.com:443
             tuf-repo-cdn.sigstore.dev:443
             www.bestpractices.dev:443