feat: adds custom scorecard certifier

[shreyasHpandya]

Fixes #2783

Description of the PR

PR Checklist

• All commits have a Developer Certificate of Origin (DCO) -- they are generated using -s flag to git commit.
• All new changes are covered by tests
• If GraphQL schema is changed, make generate has been run
• If GraphQL schema is changed, GraphQL client updates/additions have been made
• If OpenAPI spec is changed, make generate has been run
• If ent schema is changed, make generate has been run
• If collectsub protobuf has been changed, make proto has been run
• All CI checks are passing (tests and formatting)
• All dependent PRs have already been merged

[kusari-inspector]

Kusari Analysis Results:

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

No pinned version dependency changes, code issues or exposed secrets detected!

Note

View full detailed analysis result for more information on the output and the checks that were run.

---

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 81bb024, performed at: 2025-11-24T03:05:07Z

Found this helpful? Give it a 👍 or 👎 reaction!

[kusari-inspector]

Issue: Fix nil pointer dereference in defer statement

Recommended Code Changes:

resp, err := httpClient.Do(req)
if err != nil {
    return nil, fmt.Errorf("scorecard request failed: %w", err)
}
defer func() {
    _ = resp.Body.Close()
}()

[kusari-inspector]

Kusari PR Analysis rerun based on - 81bb024 performed at: 2025-11-24T03:05:26Z - link to updated analysis