File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change 11name : Scorecards supply-chain security
2- on :
2+ on :
33 # Only the default branch is supported.
44 branch_protection_rule :
55 schedule :
1717 permissions :
1818 # Needed to upload the results to code-scanning dashboard.
1919 security-events : write
20-
20+
2121 steps :
2222 - name : " Checkout code"
2323 uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
3434 repo_token : ${{ secrets.SCORECARD_TOKEN }}
3535 # Publish the results to enable scorecard badges. For more details, see
3636 # https://github.com/ossf/scorecard-action#publishing-results.
37- # If you are installing the action on a private repo, set it to `publish_results: false`
37+ # If you are installing the action on a private repo, set it to `publish_results: false`
3838 # or comment out the following line.
3939 publish_results : true
4040
4545 name : SARIF file
4646 path : results.sarif
4747 retention-days : 5
48-
48+
4949 # Upload the results to GitHub's code scanning dashboard.
5050 - name : " Upload to code-scanning"
5151 uses : github/codeql-action/upload-sarif@5f532563584d71fdef14ee64d17bafb34f751ce5 # v1.0.26
You can’t perform that action at this time.
0 commit comments