Bump open-telemetry/shared-workflows/.github/workflows/scorecard.yml (#4543)

Bumps [open-telemetry/shared-workflows/.github/workflows/scorecard.yml](https://github.com/open-telemetry/shared-workflows) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/open-telemetry/shared-workflows/releases)
- [Commits](open-telemetry/shared-workflows@dde3047...03559ef)

---
updated-dependencies:
- dependency-name: open-telemetry/shared-workflows/.github/workflows/scorecard.yml
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/ossf-scorecard.yml

@@ -16,6 +16,6 @@ jobs:
       contents: read # for actions/checkout
       id-token: write # for Scorecard to publish results
       security-events: write # for the SARIF upload to code scanning
-    uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@dde3047a8f219c296772c17936b9d02bb7447af5 # v0.12.0
+    uses: open-telemetry/shared-workflows/.github/workflows/scorecard.yml@03559ef555db0eae5d85c3c6347d1530243e7aa7 # v0.13.0
     with:
       use-harden-runner: true