Warning: This build has drifted.
The coverage report for this pull request build may be inaccurate because its base commit is no longer the HEAD of its target branch.
This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

    • Learn more: For more information on this, see Tracking coverage changes for pull request builds.
    • Fix now: For a quick fix, rebase this PR at GitHub. Your next report should be accurate.
    • Prevent going forward: To avoid this issue with future PRs, see these Recommended CI Configurations.

Add Dependabot configuration; add OpenSSF Scorecard workflow

The dependabot is already enabled in that project, but
it is better to keep the configuration file in the
.github folder.

Enrol the repository in OpenSSF Scorecard and upload SARIF results
to GitHub code-scanning. The job runs weekly and on push to master.
The job result would be marked as non-voting temporary.

Similar approach was done in Smart Gateway Operator [1]

[1] https://github.com/infrawatch/smart-gateway-operator/commit/fc163ae3b

Related-To: OSPRH-33333
Signed-off-by: Daniel Pawlik <dpawlik@redhat.com>