Add ossf/scorecard-action badge to readme
diff --git a/README.md b/README.md
index 6288aa4..ea89cd3 100644
--- a/README.md
+++ b/README.md
@@ -48,6 +48,7 @@
 [![Maven Central](https://maven-badges.herokuapp.com/maven-central/commons-dbutils/commons-dbutils/badge.svg?gav=true)](https://maven-badges.herokuapp.com/maven-central/commons-dbutils/commons-dbutils/?gav=true)
 [![Javadocs](https://javadoc.io/badge/commons-dbutils/commons-dbutils/1.8.svg)](https://javadoc.io/doc/commons-dbutils/commons-dbutils/1.8)
 [![CodeQL](https://github.com/apache/commons-dbutils/workflows/CodeQL/badge.svg)](https://github.com/apache/commons-dbutils/actions/workflows/codeql-analysis.yml?query=workflow%3ACodeQL)
+[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/apache/commons-dbutils/badge)](https://api.securityscorecards.dev/projects/github.com/apache/commons-dbutils)
 
 The Apache Commons DbUtils package is a set of Java utility classes for easing JDBC development.