From 3fde7b8766db9e636df748d093b99b417cb1f117 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ville=20Skytt=C3=A4?= <ville.skytta@upcloud.com>
Date: Wed, 30 Jul 2025 11:25:57 +0300
Subject: [PATCH] chore: add OpenSSF Scorecard

---
 .github/workflows/scorecard.yml | 21 +++++++++++++++++++++
 README.md                       |  1 +
 2 files changed, 22 insertions(+)
 create mode 100644 .github/workflows/scorecard.yml

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
new file mode 100644
index 0000000..caf923a
--- /dev/null
+++ b/.github/workflows/scorecard.yml
@@ -0,0 +1,21 @@
+name: Scorecard
+on:
+  branch_protection_rule:
+  schedule:
+    - cron: "42 4 * * MON"
+  push:
+    branches:
+      - main
+
+permissions: {}
+
+jobs:
+  scorecard:
+    name: Scorecard
+    permissions:
+      contents: read
+      id-token: write
+      security-events: write
+    uses: UpCloudLtd/workflows/.github/workflows/openssf-scorecard.yaml@main
+    with:
+      publish-results: true
diff --git a/README.md b/README.md
index 9684a06..29a7f3c 100644
--- a/README.md
+++ b/README.md
@@ -3,6 +3,7 @@
 [![test](https://github.com/UpCloudLtd/upcloud-python-api/actions/workflows/main.yml/badge.svg)](https://github.com/UpCloudLtd/upcloud-python-api/actions/workflows/main.yml)
 [![PyPI version](https://badge.fury.io/py/upcloud-api.svg)](https://badge.fury.io/py/upcloud-api)
 [![License](https://img.shields.io/badge/license-MIT-green.svg)](https://github.com/UpCloudLtd/upcloud-python-api/blob/main/LICENSE.txt)
+[![OpenSSF Scorecard](https://api.scorecard.dev/projects/github.com/UpCloudLtd/upcloud-python-api/badge)](https://scorecard.dev/viewer/?uri=github.com%2FUpCloudLtd%2Fupcloud-python-api)
 
 OOP-based API client for [UpCloud's API](https://developers.upcloud.com/1.3/). Includes most of the API
 functionality and some convenience functions that combine several API endpoints and logic.