ci: use OpenSSF Scorecard (#2933)

* ci: use OpenSSF Scorecard

* docs: update badges

.github/workflows/push-main.yaml

@@ -0,0 +1,13 @@
+---
+name: push-main
+on:
+  push:
+    branches:
+      - main
+permissions: {}
+jobs:
+  ossf-scorecard:
+    uses: suzuki-shunsuke/ossf-scorecard-workflow/.github/workflows/ossf-scorecard.yaml@aaed88174d5c679f7bb9b5a8db029079ac282006 # v0.1.0
+    permissions:
+      security-events: write
+      id-token: write

README.md

@@ -7,8 +7,7 @@
 
 #
 
-[![GitHub last commit](https://img.shields.io/github/last-commit/aquaproj/aqua.svg)](https://github.com/aquaproj/aqua)
-[![License](http://img.shields.io/badge/license-mit-blue.svg?style=flat-square)](https://raw.githubusercontent.com/aquaproj/aqua/main/LICENSE)
+[![License](http://img.shields.io/badge/license-mit-blue.svg?style=flat-square)](https://raw.githubusercontent.com/aquaproj/aqua/main/LICENSE) | [Scorecard](https://securityscorecards.dev/viewer/?uri=github.com/aquaproj/aqua)
 
 [Document](https://aquaproj.github.io/) | [Contributing](CONTRIBUTING.md) | [Logo](logo)