Allow actions/create-github-app-token for generating the necessary token from a GitHub App (#791)

Signed-off-by: Trask Stalnaker <trask.stalnaker@gmail.com>

Author: trask

app/server/verify_workflow.go

@@ -165,6 +165,7 @@ func verifyScorecardWorkflow(workflowContent string, verifier commitVerifier) er
 		switch stepName {
 		case
 			"actions/checkout",
+			"actions/create-github-app-token",
 			"ossf/scorecard-action",
 			"actions/upload-artifact",
 			"github/codeql-action/upload-sarif",