Commit db9d24a831c for nodejs

commit db9d24a831c4d4b163b26e41a43375c5f3c64c6d
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Date:   Tue Nov 3 18:48:27 2026 +0000

    meta: bump step-security/harden-runner from 2.21.1 to 2.22.3

    Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.21.1 to 2.22.3.
    - [Release notes](https://github.com/step-security/harden-runner/releases)
    - [Commits](https://github.com/step-security/harden-runner/compare/e14015d583714f6e62063499dc959a02595150a1...46b06cea07f9e64621fdf066ba77ac6915163d43)

    ---
    updated-dependencies:
    - dependency-name: step-security/harden-runner
      dependency-version: 2.22.3
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...

    Signed-off-by: dependabot[bot] <support@github.com>
    PR-URL: https://github.com/nodejs/node/pull/67191
    Reviewed-By: Ulises Gascón <ulisesgascongonzalez@gmail.com>
    Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Luigi Pinca <luigipinca@gmail.com>

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 16f1846a81a..f2f2415f524 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -36,7 +36,7 @@ jobs:

     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1  # v2.21.1
+        uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43  # v2.22.3
         with:
           egress-policy: audit  # TODO: change to 'egress-policy: block' after couple of runs