Is your feature request related to a problem? Please describe.
The links provided in the Signed-Releases check go to the API.

go run main.go --repo ossf/scorecard --checks Signed-Releases --format json --show-details | jq
...
"Info: provenance for release artifact: multiple.intoto.jsonl: https://api.github.com/repos/ossf/scorecard/releases/assets/161822912"
...

Describe the solution you'd like
It would be good to link to a more human friendly (non-API) URL when referencing GitHub release artifacts.