docs: update README badges

[Arbaazyaseen15]

Walkthrough - README Badge Updates

I have updated the badge section in the README to properly include all requested badges for the iac-scanner==0.5.0 release and verified that all badge image assets resolve correctly.

Changes Made

README.md Updates

I updated the badge row at the top of README.md to include:

• PyPI Monthly Downloads: https://img.shields.io/pypi/dm/iac-scanner
• Python Implementation/Versions: https://img.shields.io/pypi/implementation/iac-scanner and https://img.shields.io/pypi/pyversions/iac-scanner
• CodeQL: https://github.com/alphacrack/iac-scanner/actions/workflows/codeql.yml/badge.svg
• OpenSSF Scorecard: https://api.securityscorecards.dev/projects/github.com/alphacrack/iac-scanner/badge
• DCO: https://img.shields.io/badge/DCO-required-blue.svg
• Alongside existing PyPI version, CI, and License badges.

Verification & Testing

All URLs were verified to return an HTTP status of 200 OK and contain valid SVG image assets.

Automated Test Output

We executed a custom test script to verify each badge URL:

Badge Name	URL	HTTP Status	Content-Type	Is Valid SVG
PyPI Version	https://img.shields.io/pypi/v/iac-scanner	200	image/svg+xml	Yes
PyPI Monthly Downloads	https://img.shields.io/pypi/dm/iac-scanner	200	image/svg+xml	Yes
Python Versions	https://img.shields.io/pypi/pyversions/iac-scanner	200	image/svg+xml	Yes
Python Implementation	https://img.shields.io/pypi/implementation/iac-scanner	200	image/svg+xml	Yes
CI	https://github.com/alphacrack/iac-scanner/actions/workflows/ci.yml/badge.svg	200	image/svg+xml	Yes
CodeQL	https://github.com/alphacrack/iac-scanner/actions/workflows/codeql.yml/badge.svg	200	image/svg+xml	Yes
OpenSSF Scorecard	https://api.securityscorecards.dev/projects/github.com/alphacrack/iac-scanner/badge	200	image/svg+xml	Yes (Score: 4.5)
License	https://img.shields.io/badge/license-Apache%202.0-blue.svg	200	image/svg+xml	Yes
DCO	https://img.shields.io/badge/DCO-required-blue.svg	200	image/svg+xml	Yes

Note

The OpenSSF Scorecard badge was tested and returned a valid, live score of 4.5 (openssf scorecard: 4.5). Since it is not broken and does not return a 404, I did not leave any warning or placeholder in the README, but it is fully active and validated.

What & why

Fixes #

Behavior change

• User-facing:
• CLI / API surface:
• Config / env vars:
• Cost / performance:

How to review

Test evidence

Checklist

• Targets development (not main).
• Commits are DCO-signed (git commit -s).
• ruff check src/ tests/ and ruff format --check src/ tests/ clean.
• mypy src/iac_scanner clean (CI is --strict).
• Tests added / updated (pytest tests/ -m "not e2e").
• CHANGELOG.md [Unreleased] updated for user-visible behavior.
• If this touches prompts in orchestration/tasks.py: PROMPT_VERSION bumped.
• If this changes cache format: SCHEMA_VERSION in cache.py bumped.
• No new runtime deps (or, if added, justified below).

Roll-out notes

[alphacrack]

Welcome, @Arbaazyaseen15, and thanks for this! 🎉 Your badge additions in ea34e50 are good — pypi/dm (downloads), pypi/pyversions, and pypi/implementation are all useful and correctly formed.

Two things to sort out before this can merge:

1. Base branch + stale starting point (the blocker)

This PR targets development, and your branch was cut from a v0.4.0-era commit (0c2cefd). development is ~27 commits behind main and isn't where releases ship from — everything now lands on main. That mismatch is why the PR shows 64 files instead of just your README change.

Please retarget this PR to main (Edit → base branch → main) and rebase:

git remote add upstream https://github.com/alphacrack/iac-scanner.git   # if needed
git fetch upstream
git rebase upstream/main
git push --force-with-lease

Heads-up: our CONTRIBUTING.md currently (incorrectly) tells you to target development — that's our bug, not yours, and we're fixing it. Sorry for the misdirection!

2. A few of your badges already exist on main

After you rebase onto main, you'll notice the README there already has the CodeQL, OpenSSF Scorecard, DCO, and Python-versions badges (they were added in a recent hardening PR). So once rebased, please keep only the genuinely new ones — pypi/dm (downloads) and pypi/implementation — and drop the duplicates. That'll leave a clean 2-line diff.

Do that and I'll merge it. Thanks for helping polish the project's front door! 🙌

[Arbaazyaseen15]

Hi @alphacrack, I've rebased the branch onto main, removed the duplicate badges that already existed, and kept only the new pypi/dm and pypi/implementation badges.

[alphacrack]

Rebased — now adds only the two new badges (downloads, implementation), no duplicates. CI green. Thanks for iterating on the review feedback! 🎉