Improve OpenSSF Scorecard Score

[pjbgf]

"The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects."

As of 3rd January, fluxcd/source-controller scores 6.1/10. For latest score check deps.dev or manually execute scorecard.

Areas to focus on:

• Token-Permissions
  • Add Permissions to github Workflows #551
• Pinned-Dependencies
• Fuzzing
  • Fuzzing: Initial set up #443