Support case-insensitive scorecard lookups #788
Description
Repository names used in the API are currently case-sensitive. This can be an issue when the repository name was detected by tooling from another source, such as metadata1 found in a container image hosted on GitHub's or GitLab's container registries. GitHub will route any casing of a name. GitLab performs a redirect to the "canonical form". So users are not required to use the "correct" casing of the repository in metadata.
Although not an issue with the scorecard API itself, it does make it difficult in some cases for tooling to look up repositories unless given the correct casing - or by identifying the correct casing using additional API calls to GitHub, for example.
I would like the API to follow GitHub's and GitLab's lead and normalize casing of repositories, making case-insensitive lookups possible.
1 OCI annotations, provenance attestations, extrapolated from the image reference's name.