chore(ci): add OpenSSF Scorecard

Author: scop

.github/workflows/scorecard.yml

@@ -0,0 +1,21 @@
+name: Scorecard
+on:
+  branch_protection_rule:
+  schedule:
+    - cron: "42 4 * * MON"
+  push:
+    branches:
+      - main
+
+permissions: {}
+
+jobs:
+  scorecard:
+    name: Scorecard
+    permissions:
+      contents: read
+      id-token: write
+      security-events: write
+    uses: UpCloudLtd/workflows/.github/workflows/openssf-scorecard.yaml@main
+    with:
+      publish-results: true

README.md

@@ -1,5 +1,7 @@
 # UpCloud CLI for GitHub Actions
 
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/UpCloudLtd/upcloud-cli-action/badge)](https://scorecard.dev/viewer/?uri=github.com%2FUpCloudLtd%2Fupcloud-cli-action)
+
 A GitHub Action that installs and configures the [UpCloud CLI](https://github.com/UpCloudLtd/upcloud-cli) (`upctl`) for managing UpCloud infrastructure in your GitHub Actions workflows.
 
 ## Features