Update workflows

.github/workflows/dependency-review.yml

@@ -10,19 +10,25 @@ jobs:
   dependency-review:
     runs-on: ubuntu-latest
     name: Review Dependencies
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
         with:
+          disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
             api.deps.dev:443
             api.github.com:443
-            api.scorecards.dev:443
+            api.securityscorecards.dev:443
             github.com:443
 
       - name: Check out the source code
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Review dependencies
         uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b # v4.2.5
+        with:
+          comment-summary-in-pr: true