Add OpenSSF Scorecard schedule (#101)

* ci: add openssf scorecard schedule

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

* docs: add openssf scorecard badge

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

---------

Signed-off-by: Kevin Stellmacher <dev@stellmacher.xyz>

Author: Perseus985

.github/workflows/ossf-scorecard.yml

@@ -0,0 +1,18 @@
+name: OpenSSF Scorecard
+on:
+    push:
+        branches: [main]
+    schedule:
+        - cron: '30 4 * * 1'
+    workflow_dispatch:
+
+permissions: read-all
+
+jobs:
+    scorecard:
+        uses: platform-mesh/.github/.github/workflows/job-ossf-scorecard.yml@main
+        permissions:
+            security-events: write
+            id-token: write
+            contents: read
+            actions: read

README.md

@@ -2,6 +2,8 @@
 > This Repository is under development and not ready for productive use. It is in an alpha stage. That means APIs and concepts may change on short notice including breaking changes or complete removal of apis.
 
 # platform-mesh - ocm
+
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/platform-mesh/ocm/badge)](https://scorecard.dev/viewer/?uri=github.com/platform-mesh/ocm)
 ![Build Status](https://github.com/platform-mesh/ocm/actions/workflows/ocm.yaml/badge.svg)
 
 ## Description