Include OpenSSF score card

[rettichschnidi]

As designed by the OpenSSF, this workflow will work only it has been merged to main:

2024/11/10 09:08:32 creating scorecard entrypoint: validating options: only default branch is supported
EnvGithubAuthToken: GITHUB_AUTH_TOKEN ***
refs/heads/gardena/rs/upstream/run-openssf-score-card not supported with push event.
Only the default branch main is supported.

Until then, the following can be done to verify this:

• Apply this PR to main of a dedicated testing fork (e.g. rettichschnidi@0e26691)
• Check out the score card generated by the OpenSSF (unfortunately, they are still using the old URL)
• Check out the badge generated by the OpenSSF: (unfortunately, they are still using the old URL)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[LukasWoodtli]

Cool! I tried this before, but didn't succeed.

LGTM

[LukasWoodtli]

Thanks!
Can't really approve, that it works. Let's see after merge.