starter-workflows/code-scanning/properties/scorecards.properties.json

{
    "name": "OSSF Scorecards supply-chain security analysis",
    "creator": "Open Source Security Foundation (OpenSSF) - https://github.com/ossf",
    "description": "Scorecards is a static analysis tool to assess the security posture of your project",
    "iconName": "scorecards",
    "categories": ["Code Scanning"]
}