diff --git a/.github/workflows/doctoc.yml b/.github/workflows/doctoc.yml
index a8b6913..3a8d72b 100644
--- a/.github/workflows/doctoc.yml
+++ b/.github/workflows/doctoc.yml
@@ -21,10 +21,10 @@ jobs:
       - name: Install doctoc
         run: npm i -g doctoc
       - name: Create README copy and diff with doctoc
-        run: cp README.md README.md.tmp &&
-          doctoc --title='## Table of Contents' --github README.md &&
-          diff -q README.md README.md.tmp
+        run: cp README.md README.md.tmp && doctoc --title='## Table of Contents' --github README.md && diff -q README.md README.md.tmp
       - name: Create "docs/BestPractices.md" copy and diff with doctoc
-        run: cp docs/BestPractices.md docs/BestPractices.md.tmp &&
-          doctoc --title='## Table of Contents' --github docs/BestPractices.md &&
-          diff -q docs/BestPractices.md docs/BestPractices.md.tmp
+        run: cp docs/BestPractices.md docs/BestPractices.md.tmp && doctoc --title='## Table of Contents' --github docs/BestPractices.md && diff -q docs/BestPractices.md docs/BestPractices.md.tmp
+
+
+
+
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 7b80af8..732b38b 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -12,7 +12,7 @@ on:
   schedule:
     - cron: '30 12 * * 6'
   push:
-    branches: [ "main" ]
+    branches: ["main"]
 
 # Declare default permissions as read only.
 permissions: read-all
@@ -68,6 +68,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@5c8a8a642e79153f5d047b10ec1cba1d1cc65699 # ratchet:github/codeql-action/upload-sarif@v3
         with:
           sarif_file: results.sarif