🌱 add support for Checkov SAST tool

[AdamKorcz]

What kind of change does this PR introduce?

(Is it a bug fix, feature, docs update, something else?)

feature

• PR title follows the guidelines defined in our pull request documentation

What is the current behavior?

Scorecard does not support Checkov.

What is the new behavior (if this is a feature change)?**

Scorecard supports Checkov.

• Tests for the changes have been added (for bug fixes/features)

Which issue(s) this PR fixes

Partially fixes #2318 (comment)

Special notes for your reviewer

Does this PR introduce a user-facing change?

Support Checkov SAST.

[codecov]

Codecov Report

Attention: Patch coverage is 50.00000% with 3 lines in your changes missing coverage. Please review.

Project coverage is 68.28%. Comparing base (353ed60) to head (4141935).
Report is 188 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4686      +/-   ##
==========================================
+ Coverage   66.80%   68.28%   +1.47%     
==========================================
  Files         230      249      +19     
  Lines       16602    18890    +2288     
==========================================
+ Hits        11091    12899    +1808     
- Misses       4808     5131     +323     
- Partials      703      860     +157     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.