BUG: YAML parsing error

[brynpickering]

Describe the bug
I am receiving the following errors when running the scorecard CLI on the public project https://github.com/e4st-dev/E4ST.jl

Check Dangerous-Workflow failed for github.com/e4st-dev/E4ST.jl: internal error: internal error: invalid GitHub workflow:
:28:0: could not parse as YAML: mapping values are not allowed in this context [syntax-check]
Check Packaging failed for github.com/e4st-dev/E4ST.jl: internal error: internal error: invalid GitHub workflow:
:28:0: could not parse as YAML: mapping values are not allowed in this context [syntax-check]
Check Pinned-Dependencies failed for github.com/e4st-dev/E4ST.jl: internal error: internal error: invalid GitHub workflow:
:28:0: could not parse as YAML: mapping values are not allowed in this context [syntax-check]
Check SAST failed for github.com/e4st-dev/E4ST.jl: internal error: internal error: invalid GitHub workflow:
:28:0: could not parse as YAML: mapping values are not allowed in this context [syntax-check]
Check Token-Permissions failed for github.com/e4st-dev/E4ST.jl: internal error: internal error: invalid GitHub workflow:
:28:0: could not parse as YAML: mapping values are not allowed in this context [syntax-check]

Reproduction steps
Run scorecard --repo="github.com/e4st-dev/E4ST.jl"

Expected behavior
Ideally, malformed github workflows would not cause an issue (I assume this is the cause of the issue). If an error is expected, the exact file in the repo should be highlighted in the error, so it can be addressed.