Merge pull request #345 from intel/scorecard-update

Create .scorecard.yml

Author: michaeloreillyintel

.scorecard.yml

@@ -0,0 +1,10 @@
+exemptions:
+  - checks:
+      - pinned-dependencies
+    annotations:
+      # The CI files should not be pinned
+      # because the do not ship with the product.
+      - annotation: not-applicable
+        paths:
+          - ci/*
+      # other dependencies can be penalized