The GitHub integration for scorecards currently provides the ability to "extract a string from a file." It is very limited in that one has to essentially hard code a specific file. It makes writing a rule like "I want to score my code by the versions of .NET they are built against" or anything else that might match multiple files. In a larger enterprise, one will deal with a lot of variation in specific file names, so the ability to scan configuration files or any other meta data by a file extension or other pattern would be extremely useful. Without that, the only option would be to hard code hundreds of explicit file names, making IDP management very unwieldy.