feat: add OpenSSF badge

[maxday]

Hi team,

The clomonitor.io score for this repo is a bit low, one item that is missing is the OpenSSF badge
(source: https://clomonitor.io/projects/cncf/open-telemetry#opentelemetry-lambda)

This PR displays the badge on README

The clomonitor metric is reported on the CNCF website: https://landscape.cncf.io/?item=observability-and-analysis--observability--opentelemetry so this PR will help to raise the overall score.

Let me know if you have any questions of course!

[pragmaticivan]

Is there a way to change the design? This is the only badge out of pattern.

[maxday]

I guess it is indeed possible using https://shields.io/badges but the documented check mention a regex against the api.scorecard domain https://clomonitor.io/docs/topics/checks/#openssf-scorecard-badge. We could of course bypass to cheat and add it as a comment but I don't think that's a good idea. Let me know!

[pragmaticivan]

I don't have much say on that one, but my suggestion is that we bypass to make it similar ot change the other ones to match this new one.

I will defer to @serkan-ozal @tylerbenson

[tylerbenson]

Can you share some links to other OpenTelemetry repos that are already using this?

[maxday]

Sure @tylerbenson

1. https://github.com/open-telemetry/opentelemetry-go
2. https://github.com/open-telemetry/opentelemetry-java-contrib
3. https://github.com/open-telemetry/opentelemetry-android
4. https://github.com/open-telemetry/opentelemetry-rust

[serkan-ozal]

They are redirecting to the img.shields.io along with given path and query parameters. So adding style=for-the-badge query param to the link is enough: https://api.scorecard.dev/projects/github.com/open-telemetry/opentelemetry-lambda/badge?style=for-the-badge

[maxday]

oh nice! Let me update the PR then!

[maxday]

This indeed looks better now!

[pragmaticivan]

Thx for accommodating the style changes!