infra: add ossf scorecard workflow and badge
Issue #, if available:
Description of changes: Add in a scorecard to be more transparent around project standards and best practices. From https://github.com/ossf/scorecard.
This will give better goal setting around making changes that help with the score and security of the SDK.
Testing done:
Merge Checklist
Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your pull request.
General
- [ ] I have read the CONTRIBUTING doc
- [ ] I used the commit message format described in CONTRIBUTING
- [ ] I have updated any necessary documentation, including READMEs and API docs (if appropriate)
Tests
- [ ] I have added tests that prove my fix is effective or that my feature works (if appropriate)
- [ ] I have checked that my tests are not configured for a specific region or account (if appropriate)
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Codecov Report
Merging #601 (bf09e39) into main (313e605) will not change coverage. The diff coverage is
n/a.
@@ Coverage Diff @@
## main #601 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 122 122
Lines 8100 8100
Branches 1815 1815
=========================================
Hits 8100 8100
Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 100.00%. Comparing base (
02316ff) to head (c8e9694). Report is 277 commits behind head on main.
Additional details and impacted files
@@ Coverage Diff @@
## main #601 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 127 127
Lines 8222 8222
Branches 1832 1832
=========================================
Hits 8222 8222
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Revisiting at a later date.