sigstore/community/.github/workflows/reusable-scorecard.yml@d0c95c8803672313d0bf72e1a44021be5b583c24 is not allowed to be used in bobcallaway/rekor. Reusable workflows in this workflow must be: within a repository owned by bobcallaway.