Previous v1.20.1 pin returned 404 from the releases endpoint; latest upstream tag is v1.20.0 per https://github.com/zegl/kube-score/releases/latest. Locally verified the tarball extracts cleanly to a kube-score binary + LICENSE. Also adds -f to curl so HTTP errors fail the step immediately instead of saving an HTML 404 body to disk and failing later in tar. Co-Authored-By: Nakamoto, S <[email protected]>