README.md: add openssf passing badge

[lsm5]

[NO NEW TESTS NEEDED]

Does this PR introduce a user-facing change?

None

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lsm5

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [lsm5]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[lsm5]

Do not merge until no-objection from @mtrmac :)

[mtrmac]

Is that WRT badges in general (as in containers/skopeo#2596 ) or WRT the OpenSSF compliance?

I’m… not inclined to make too much of a fuss about either one, although I think it’s worth a bit of discussion.

[lsm5]

Is that WRT badges in general (as in containers/skopeo#2596 ) or WRT the OpenSSF compliance?

openssf compliance

I’m… not inclined to make too much of a fuss about either one, although I think it’s worth a bit of discussion.

ack, sgtm

[lsm5]

Opening for review.

[TomSweeneyRedHat]

LGTM
as far as what you meant it to do. I'll leave it up to others to decide if want the badge or not. I'm fine with it.

[mheon]

/lgtm

[mheon]

Oh
/hold

[mheon]

Just saw ther comment about waiting for confirmation from @mtrmac

[mtrmac]

I think I’d like at least a record of whether we were looking only at the Podman proper, or also at vendored dependencies. If we are including vendored dependencies, let’s be transparent about that.

More in a different channel.