diff --git a/.github/workflows/pipelines.yml b/.github/workflows/pipelines.yml
index 1f7ce31..abed2f6 100644
--- a/.github/workflows/pipelines.yml
+++ b/.github/workflows/pipelines.yml
@@ -5,17 +5,15 @@ on:
     paths-ignore:
       - .codecov/**
       - .docfx/**
-      - .github/**
       - .nuget/**
-      - '**.md'
+      - '**/*.md'
   push:
     branches: [main]
     paths-ignore:
       - .codecov/**
       - .docfx/**
-      - .github/**
       - .nuget/**
-      - '**.md'
+      - '**/*.md'
   workflow_dispatch:
     inputs:
       configuration:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index bf9d97c..aabea97 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -23,14 +23,14 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@v2
+        uses: ossf/scorecard-action@v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@4
+        uses: actions/upload-artifact@v4
         with:
           name: SARIF file
           path: results.sarif