On open source projects, is it fine to run build scans even if that can be a bit spammy? (Dependabot/Renovate PRs) and so on