chore: Add OpenSSF scorecard

.github/workflows/pa11y.yml

@@ -15,6 +15,9 @@ env:
   FORCE_COLOR: 2
   NODE: 24
 
+permissions:
+  contents: read
+
 jobs:
   pa11y:
     runs-on: ubuntu-latest

.github/workflows/publish-nuget.yml

@@ -4,6 +4,9 @@ on:
   release:
     types: [published]
 
+permissions:
+  contents: read
+
 jobs:
   package-nuget:
     runs-on: windows-latest

.github/workflows/update-pr-approved.yml

@@ -4,6 +4,9 @@ on:
     types:
       - submitted
 
+permissions:
+  contents: read
+
 jobs:
   move_card_to_next_review:
     if: github.event.review.state == 'approved'

.github/workflows/update-pr-desc-links.yml

@@ -4,6 +4,9 @@ on:
     types:
       - opened
 
+permissions:
+  contents: read
+
 jobs:
   track_pr:
     runs-on: ubuntu-latest

.github/workflows/update-pr-design-a11y-approved.yml

@@ -5,6 +5,9 @@ on:
       - labeled
       - unlabeled
 
+permissions:
+  contents: read
+
 jobs:
   design_or_a11y_approved:
     if: (contains(github.event.*.labels.*.name, 'passed a11y review') || contains(github.event.*.labels.*.name, 'passed design review')) && !(contains(github.event.*.labels.*.name, 'ready for a11y review') || contains(github.event.*.labels.*.name, 'ready for design review'))

.github/workflows/update-pr-ready-review.yml

@@ -6,6 +6,9 @@ on:
      - opened
      - reopened
 
+permissions:
+  contents: read
+
 jobs:
   move_card_to_need_dev_review:
     if: github.event.pull_request.draft == false

.github/workflows/update-pr-review-in-progress.yml

@@ -4,6 +4,9 @@ on:
     types:
       - submitted
 
+permissions:
+  contents: read
+
 jobs:
   move_card_to_dev_review_in_progress:
     if: ${{ github.event.pull_request.draft == false && github.event.review.state == 'changes_requested' && github.actor != vars.LEAD_DEV_GH_USERNAME && github.actor != vars.A11Y_REVIEWER_GH_USERNAME }}

README.md

@@ -58,6 +58,7 @@ Read the [Getting started page](https://web.unified-design-system.orange.com/doc
 [![JS gzip size](https://img.badgesize.io/Orange-OpenSource/Orange-Boosted-Bootstrap/ouds/main/dist/js/ouds-web.min.js?compression=gzip&label=JS%20gzip%20size)](https://github.com/Orange-OpenSource/Orange-Boosted-Bootstrap/blob/ouds/main/dist/js/ouds-web.min.js)
 [![JS Brotli size](https://img.badgesize.io/Orange-OpenSource/Orange-Boosted-Bootstrap/ouds/main/dist/js/ouds-web.min.js?compression=brotli&label=JS%20Brotli%20size)](https://github.com/Orange-OpenSource/Orange-Boosted-Bootstrap/blob/ouds/main/dist/js/ouds-web.min.js)
 [![JSDelivr](https://data.jsdelivr.com/v1/package/npm/@ouds/web-common/badge)](https://www.jsdelivr.com/package/npm/@ouds/web-common)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/Orange-OpenSource/Orange-Boosted-Bootstrap/badge)](https://scorecard.dev/viewer/?uri=github.com/Orange-OpenSource/Orange-Boosted-Bootstrap)
 
 ## What’s included