Create scorecard.yml

[AlCutter]

No description provided.

[phbnf]

All the other scorecard configs of our repos are called "scorecardS.yml", consistency on this sounds like a good idea?

[AlCutter]

All the other scorecard configs of our repos are called "scorecardS.yml", consistency on this sounds like a good idea?

Sure, although this file was created automatically with the button on the workflow, so perhaps that changed at some point.

Either way, I'll update the other repos since scorecard.yml now seems to be the "recommended" name for the file.

[AlCutter]

All the other scorecard configs of our repos are called "scorecardS.yml", consistency on this sounds like a good idea?

Sure, although this file was created automatically with the button on the workflow, so perhaps that changed at some point.

Either way, I'll update the other repos since scorecard.yml now seems to be the "recommended" name for the file.

Ah, yes - even the content of the autogenerated file has switched from referencing "Scorecards" to "Scorecard" at some point between my creating the configs in Trillian etc. and here.

[roger2hk]

The workflow file in scorecard repo is named as scorecard-analysis.yml.

https://github.com/ossf/scorecard/blob/main/.github/workflows/scorecard-analysis.yml

[AlCutter]

The workflow file in scorecard repo is named as scorecard-analysis.yml.

https://github.com/ossf/scorecard/blob/main/.github/workflows/scorecard-analysis.yml

Hehe, it's not consistent with what the autogen tool creates either :)
I don't think it really matters a huge deal, but having them called the same thing across all of our repos seems reasonable.

[AlCutter]

google/trillian#2986
google/certificate-transparency-go#1068
transparency-dev/merkle#58
transparency-dev/formats#26
transparency-dev/witness#42

(t-e doesn't have SC configured at the moment)

[phbnf]

+1 to what Al said