scorecard : Can we get OpenSSF info without a clone?

It seems like we should be able to directly call the API

or use an approach like this:
https://github.com/ossf/scorecard#standalone

That could avoid a lot of this issues we are hitting with the scorecard values now