Update post-merge-scorecard.yml to use the latest version of Orch-CI (#754)

Author: daveroge

.github/workflows/post-merge-scorecard.yml

@@ -17,7 +17,7 @@ permissions:
 
 jobs:
   call-scorecard:
-    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@main
+    uses: open-edge-platform/orch-ci/.github/workflows/post-merge-scorecard.yml@20b640842e63420b06b3ff4247e608228e14c74a  # 2026.0.1
     with:
       project_folder: "."
     secrets:

.github/workflows/pre-merge.yml

@@ -113,7 +113,7 @@ jobs:
       contents: read
     needs: pre-checks
     if: ${{ contains(needs.pre-checks.outputs.other_changed_projects, 'os-profiles') }}
-    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@main
+    uses: open-edge-platform/orch-ci/.github/workflows/pre-merge.yml@20b640842e63420b06b3ff4247e608228e14c74a  # 2026.0.1
     with:
       bootstrap_tools: "yq,nodejs"
       run_security_scans: true