Sync common files from infra repository (#26)

Synchronized from bootc-dev/infra@e6bcd34.

Signed-off-by: bootc-dev Bot <bot@bootc.dev>
Co-authored-by: bootc-dev Bot <bot@bootc.dev>

Author: bootc-bot[bot]

.bootc-dev-infra-commit.txt

@@ -1 +1 @@
-d5a5a62c9810a416e4cc98f377c05343393f7c14
+e6bcd3444045825b890b2203bed18ea9c1a4df89

.github/workflows/openssf-scorecard-gate.yml

@@ -0,0 +1,28 @@
+# Gate PRs on OpenSSF Scorecard regressions.
+#
+# See also: https://github.com/ossf/scorecard/issues/1270
+name: OpenSSF Scorecard
+
+on:
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  scorecard:
+    name: Scorecard
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Check for regressions
+        uses: bootc-dev/actions/openssf-scorecard@main
+        with:
+          base-sha: ${{ github.event.pull_request.base.sha }}
+          head-sha: ${{ github.event.pull_request.head.sha }}