omit vcs info from build (#1514)

The detected info is interfering with the manually specified Scorecard
version in the LDFLAGS. While `buildvcs` has been present since Go 1.18,
Go 1.24 changed the behavior again. Our docker image uses Go 1.24 as of
3676bbc.

https://go.dev/doc/go1.24#go-command

Signed-off-by: Spencer Schrock <sschrock@google.com>

Author: spencerschrock

Makefile

@@ -3,4 +3,4 @@ LDFLAGS=-X sigs.k8s.io/release-utils/version.gitVersion=v5.1.1 -X sigs.k8s.io/re
 
 build: ## Runs go build on repo
 	# Run go build and generate scorecard executable
-	CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -ldflags '$(LDFLAGS)'
+	CGO_ENABLED=0 go build -o scorecard-action -trimpath -a -tags netgo -buildvcs=false -ldflags '$(LDFLAGS)'