BUG: Unrecognized CI/CDs

[gabibguti]

Describe the bug
This bug describes CI/CD tools that repositories may use to perform tests and/or releases. These CI/CDs could be detected by Scorecard when evaluating not only checks such as CI-Tests, Packaging and Signed-Releases, but also, Dangerous-Workflow (as suggested in #3630), Pinned-Dependencies and Token-Permissions.

Reproduction steps

Expected behavior
Scorecard identifies CI/CDs tools other than GitHub Actions when evaluating repository pipelines.

Additional context
This CI Detector gem in Ruby can provide some insights on some CI/CDs used by the community:
https://github.com/ruby/ruby/blob/master/lib/rubygems/ci_detector.rb#L11-L25

[gabibguti]

Related to:

• Feature: Detect CI-Tests and releases made through BAZEL CI #3274
• Feature: Recognize Kokoro for CI-Tests check #2819
• Feature: Pin dependencies for other CI/CD #994

[spencerschrock]

is this issue intended to organize related issues? Should we use a project board status instead?

[gabibguti]

is this issue intended to organize related issues?

Yes.

Should we use a project board status instead?

Can be, if that's easier for organization.

[emaste]

Added #4075 for Cirrus-CI