diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 6cc58d17..e7fa1436 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,5 +1,5 @@
 ---
-name: Build
+name: build
 on:
   push:
     branches: [ 'main' ]
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 7deb1cdd..26608adc 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -9,7 +9,7 @@
 # the `language` matrix defined below to confirm you have the correct set of
 # supported CodeQL languages.
 #
-name: CodeQL
+name: codeQL
 
 on:
   push:
diff --git a/.github/workflows/pr-check-against-providers.yaml b/.github/workflows/pr-check-against-providers.yaml
index 349e7c10..634ab0e2 100644
--- a/.github/workflows/pr-check-against-providers.yaml
+++ b/.github/workflows/pr-check-against-providers.yaml
@@ -1,5 +1,5 @@
 ---
-name: Check Against Providers
+name: check against providers
 on:
   pull_request:
     types: ['opened', 'synchronize']
diff --git a/.github/workflows/pr-depscheck.yaml b/.github/workflows/pr-depscheck.yaml
index 3702ebee..d6410cb6 100644
--- a/.github/workflows/pr-depscheck.yaml
+++ b/.github/workflows/pr-depscheck.yaml
@@ -1,5 +1,5 @@
 ---
-name: Vendor Dependencies Check
+name: vendor dependencies check
 on:
   push:
     branches: [ 'main' ]
diff --git a/.github/workflows/pr-golangci-lint.yaml b/.github/workflows/pr-golangci-lint.yaml
index c96efd59..c947c37a 100644
--- a/.github/workflows/pr-golangci-lint.yaml
+++ b/.github/workflows/pr-golangci-lint.yaml
@@ -1,5 +1,5 @@
 ---
-name: GolangCI Lint
+name: golangCI
 on:
   push:
     branches: [ 'main' ]
diff --git a/.github/workflows/pr-govulncheck.yaml b/.github/workflows/pr-govulncheck.yaml
index 17d3312c..f85e0378 100644
--- a/.github/workflows/pr-govulncheck.yaml
+++ b/.github/workflows/pr-govulncheck.yaml
@@ -1,5 +1,5 @@
 ---
-name: Go Vulnerability Check
+name: go vulnerability check
 on:
   push:
     branches: [ 'main' ]
diff --git a/.github/workflows/pr-tests.yaml b/.github/workflows/pr-tests.yaml
index 7776b857..2282c875 100644
--- a/.github/workflows/pr-tests.yaml
+++ b/.github/workflows/pr-tests.yaml
@@ -1,5 +1,5 @@
 ---
-name: Tests
+name: tests
 on:
   push:
     branches: [ 'main' ]
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1c7e1cff..47c72b08 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -1,5 +1,5 @@
 ---
-name: Release
+name: release
 on:
   push:
     tags: ['v*']
diff --git a/.github/workflows/shellcheck.yaml b/.github/workflows/shellcheck.yaml
index 88c93623..29c39f27 100644
--- a/.github/workflows/shellcheck.yaml
+++ b/.github/workflows/shellcheck.yaml
@@ -1,4 +1,4 @@
-name: ShellCheck
+name: shellcheck
 on:
   push:
     branches: [ 'main' ]
diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml
index 005a05ab..bbc99a17 100644
--- a/.github/workflows/typos.yaml
+++ b/.github/workflows/typos.yaml
@@ -1,4 +1,4 @@
-name: Typos
+name: typos
 
 # Spell checks every file in the repo with typos (config in .typos.toml). Complements the misspell
 # linter in golangci-lint, which only sees Go files.
diff --git a/.github/workflows/workflow-actionlint.yml b/.github/workflows/workflow-actionlint.yml
index 6b34d396..ad01b29a 100644
--- a/.github/workflows/workflow-actionlint.yml
+++ b/.github/workflows/workflow-actionlint.yml
@@ -1,4 +1,4 @@
-name: Workflow Action Lint
+name: workflow action lint
 
 # Lints .github/workflows/ with rhysd/actionlint (expression/context errors, shellcheck on run:
 # blocks, action input validation). actionlint is pinned in .tools/go.mod (built by make) so the
diff --git a/.github/workflows/workflow-yamllint.yml b/.github/workflows/workflow-yamllint.yml
index f64364f3..d7090574 100644
--- a/.github/workflows/workflow-yamllint.yml
+++ b/.github/workflows/workflow-yamllint.yml
@@ -1,4 +1,4 @@
-name: Workflow YAML Lint
+name: workflow YAML lint
 
 # Lints the repo's YAML (workflows, configs) with yamllint; rules live in .yamllint.yml.
 # yamllint auto-detects GitHub Actions, emitting ::error annotations that show up inline
diff --git a/README.md b/README.md
index d635a72b..639f4aa8 100644
--- a/README.md
+++ b/README.md
@@ -1,12 +1,12 @@
 # terrafmt
 
 [![GitHub release](https://img.shields.io/github/v/release/katbyte/terrafmt?color=blueviolet)](https://github.com/katbyte/terrafmt/releases/latest)
-[![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/terrafmt?color=00ADD8)](https://github.com/katbyte/terrafmt/blob/main/go.mod)
+[![Go Version](https://img.shields.io/github/go-mod/go-version/katbyte/terrafmt?label=go&color=00ADD8)](https://github.com/katbyte/terrafmt/blob/main/go.mod)
 [![License](https://img.shields.io/github/license/katbyte/terrafmt?color=blue)](https://github.com/katbyte/terrafmt/blob/main/LICENSE)
 ![build](https://github.com/katbyte/terrafmt/actions/workflows/build.yaml/badge.svg)
-![test](https://github.com/katbyte/terrafmt/actions/workflows/pr-tests.yaml/badge.svg)
 ![lint](https://github.com/katbyte/terrafmt/actions/workflows/pr-golangci-lint.yaml/badge.svg)
 ![CodeQL](https://github.com/katbyte/terrafmt/actions/workflows/codeql-analysis.yml/badge.svg)
+[![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/katbyte/terrafmt?label=openSSF)](https://scorecard.dev/viewer/?uri=github.com/katbyte/terrafmt)
 
 A tool for extracting and formatting [Terraform](https://www.terraform.io/docs/) configuration embedded in other files, primarily intended to help with [provider](https://www.terraform.io/docs/providers/index.html) development.