Update CI badge configuration

[arkid15r]

Proposed change

Narrow down CI status badge to main branch via event type.

Checklist

• Required: I followed the contributing workflow
• Required: I verified that my code works as intended and resolves the issue as described
• Required: I ran all required checks and tests locally; all warnings addressed and failures resolved
• I used AI for code, documentation, tests, or communication related to this PR

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: ASSERTIVE

Plan: Pro

Run ID: edcb1c06-1412-4a65-8e6d-0f18176158a6

📥 Commits

Reviewing files that changed from the base of the PR and between 02c240f and f9594b7.

📒 Files selected for processing (1)

• README.md

---

Summary by CodeRabbit

• Documentation
  • Updated the project badge row to reflect the latest CI status checks.
  • Added OpenSSF status and Scorecard badges for improved visibility.
  • Removed outdated badges that only tracked the main branch.

Walkthrough

The README badge row now points the CI workflow badge at merge_group and includes OpenSSF passing and Scorecard badges, replacing the previous main-branch badge variants.

Changes

README badge updates

Layer / File(s)	Summary
Badge row update README.md	The top badge row changes the CI badge event to merge_group, adds OpenSSF passing and Scorecard badges, and removes the prior main-branch CI/CD badge variants.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• OWASP/Nest#5013: Also changes the README badge row in the top badges section.
• OWASP/Nest#5023: Also updates the README badge row with CI/security-related badge changes.

Suggested reviewers

• cubic-dev-ai
• kasya

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: updating the CI badge configuration.
Description check	✅ Passed	The description is directly related to the badge update and matches the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ark/update-ci-badge-config

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cubic-dev-ai]

No issues found across 1 file

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Re-trigger cubic}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.74%. Comparing base (7ac0fc0) to head (f9594b7).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #5055   +/-   ##
=======================================
  Coverage   98.74%   98.74%           
=======================================
  Files         539      539           
  Lines       17069    17069           
  Branches     2421     2421           
=======================================
  Hits        16854    16854           
  Misses        123      123           
  Partials       92       92           

Flag	Coverage Δ
backend	99.45% <ø> (ø)
frontend	96.71% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7ac0fc0...f9594b7. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud