diff --git a/.github/workflows/_dotnet-build-and-test.yml b/.github/workflows/_dotnet-build-and-test.yml
index ab78bc5..2a8bee1 100644
--- a/.github/workflows/_dotnet-build-and-test.yml
+++ b/.github/workflows/_dotnet-build-and-test.yml
@@ -96,6 +96,7 @@ jobs:
             api.nuget.org:443
             auth.docker.io:443
             builds.dotnet.microsoft.com:443
+            cli.codecov.io:443
             dotnetcli.azureedge.net:443
             cognito-identity.us-east-1.amazonaws.com:443
             crl.sectigo.com:443
diff --git a/.github/workflows/_scan-ossf-scorecard.yml b/.github/workflows/_scan-ossf-scorecard.yml
index 7483fdb..9b40d3f 100644
--- a/.github/workflows/_scan-ossf-scorecard.yml
+++ b/.github/workflows/_scan-ossf-scorecard.yml
@@ -16,19 +16,6 @@ on:
         required: false
         type: string
         default: ubuntu-latest
-      dotnet-version:
-        description: "Dotnet SDK version to use if no matrix is provided"
-        required: false
-        type: string
-        default: 10.0.x
-      language:
-        description: "Language to scan for. eg csharp"
-        required: true
-        type: string
-      timeout-minutes:
-        required: false
-        type: number
-        default: 360
 
 # Declare default permissions as read only.
 permissions: read-all