Enhance CI workflow with step-security/harden-runner

[mathieu-benoit]

Enhance CI workflow with step-security/harden-runner

[github-actions]

Overview

Image reference	score-helm:latest	score-helm:latest
- digest	83500f6ad909	2ceffb8a33c7
- tag	latest	latest
- provenance	09cfb1e	8d27062
- vulnerabilities
- platform	linux/amd64	linux/amd64
- size	3.7 MB	3.7 MB (+10 B)
- packages	23	23

Policies (0 improved, 0 worsened)

Policy Name	score-helm:latest	score-helm:latest	Change	Standing
Default non-root user	✅	✅		No Change
No AGPL v3 licenses	✅	✅		No Change
No fixable critical or high vulnerabilities	✅	✅		No Change
No high-profile vulnerabilities	✅	✅		No Change
No outdated base images	✅	✅		No Change
No unapproved base images	✅	✅		No Change
Supply chain attestations	✅	✅		No Change
Valid Docker Hardened Image (DHI) or DHI base image	⚠️ 2	⚠️ 2		No Change

Packages and Vulnerabilities (1 package changes and 0 vulnerability changes)

• ♾️ 1 packages changed
• 22 packages unchanged

Changes for packages of type golang (1 changes)

	Package	Version score-helm:latest	Version score-helm:latest
♾️	github.com/score-spec/score-helm	0.0.0-20260409014700-09cfb1e4335a	0.10.1-0.20260409015241-8d270623f7cd