diff --git a/.scorecard.yml b/.scorecard.yml
new file mode 100644
index 00000000..e760fd7c
--- /dev/null
+++ b/.scorecard.yml
@@ -0,0 +1,5 @@
+annotations:
+  - checks:
+      - dangerous-workflow
+    reasons:
+      - reason: not-applicable # This workflow does not run untrusted code, the bot will only backport a code if the a PR was approved and merged into main.