Problem

For Google Summer of Code, Google is pushing for adding security on selected project through the open source security foundation tools; namely a scorecard running as GitHub action and a badge linked to best practices adoption will do.

Proposed Solution

I'll open a PR to add the GitHub workflow, the badge and the documentation. But I'ld be happy if some maintainers could help me with the best practices responses (and to check I'm not the only being able to update that form).

Additional context

• OpenSSF scoredcard
• OpenSSF Best Practices Badge Program