diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index baf286b..44e9cf3 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -14,6 +14,8 @@ on: push: branches: ["gh-pages"] + workflow_dispatch: + # Declare default permissions as read only. permissions: read-all @@ -37,7 +39,7 @@ jobs: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 + uses: ossf/scorecard-action@v2.4.3 with: results_file: results.sarif results_format: sarif @@ -59,15 +61,15 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@97a0fba1372883ab732affbe8f94b823f91727db # v3.pre.node20 + uses: actions/upload-artifact@v4 with: - name: SARIF file + name: scorecard-sarif path: results.sarif retention-days: 5 # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: results.sarif diff --git a/_layouts/_includes/footer.html b/_layouts/_includes/footer.html index 42b4394..3f0f8f3 100644 --- a/_layouts/_includes/footer.html +++ b/_layouts/_includes/footer.html @@ -28,7 +28,7 @@

Contact Us