✨ Support for GitHub's internal integration

[laurentsimon]

See discussion at ossf/scorecard-action#1107

Set

• SCORECARD_INTERNAL_GITHUB_INTEGRATION=1
• SCORECARD_INTERNAL_GITHUB_SARIF_TOOL_NAME=<tool-name>
• SCORECARD_INTERNAL_GITHUB_CHECKS=check1,check2,<others>

The GitHub team will be able to create a workflow:

- uses: ossf/scorecard-action@<ref>
  env:
     SCORECARD_INTERNAL_GITHUB_INTEGRATION: 1
     SCORECARD_INTERNAL_GITHUB_SARIF_TOOL_NAME: <the-name>
     SCORECARD_INTERNAL_GITHUB_CHECKS: check1,check2,check3

Note that this is a "hidden feature" and that's why we don't expose it via a proper Action input.

Add internal flags to support GitHub's internal scans

[codecov]

Codecov Report

Merging #2773 (0c141f6) into main (7f2e840) will decrease coverage by 0.03%.
The diff coverage is 31.81%.

❗ Current head 0c141f6 differs from pull request most recent head 7b39d37. Consider uploading reports for the commit 7b39d37 to get more accurate results

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2773      +/-   ##
==========================================
- Coverage   49.23%   49.20%   -0.03%     
==========================================
  Files         158      158              
  Lines       11950    11969      +19     
==========================================
+ Hits         5883     5889       +6     
- Misses       5699     5711      +12     
- Partials      368      369       +1     

[laurentsimon]

This is merged. I'll work on creating a branch in scorecard-action to test these changes. I'll comment in the tracking issue on scorecard-action repo with updates soon