fix: scorecards checks and .gitattributes (#529)

Relates-to: ossf/scorecard#2489

Signed-off-by: Sam Gammon <[email protected]>

Author: sgammon

.gitattributes

@@ -1,13 +1,15 @@
 README.md export-ignore
-SECURITY.md export-ignore
 commitlint.config.js export-ignore
 pnpm-lock.yaml export-ignore
 pom.xml export-ignore
 local.bazelrc.inert export-ignore
 .aspect/bazelrc/ export-ignore
 .bazelci/ export-ignore
 .bcr/ export-ignore
-.github/ export-ignore
+.github/*.md export-ignore
+.github/*.yml export-ignore
+.github/codeql export-ignore
+.github/workflows export-ignore
 .husky/ export-ignore
 docs/ export-ignore
 tools/ export-ignore