File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change 1
1
name : Scorecards supply-chain security
2
- on :
2
+ on :
3
3
# Only the default branch is supported.
4
4
branch_protection_rule :
5
5
schedule :
17
17
permissions :
18
18
# Needed to upload the results to code-scanning dashboard.
19
19
security-events : write
20
-
20
+
21
21
steps :
22
22
- name : " Checkout code"
23
23
uses : actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # v2.4.0
34
34
repo_token : ${{ secrets.SCORECARD_TOKEN }}
35
35
# Publish the results to enable scorecard badges. For more details, see
36
36
# https://github.com/ossf/scorecard-action#publishing-results.
37
- # If you are installing the action on a private repo, set it to `publish_results: false`
37
+ # If you are installing the action on a private repo, set it to `publish_results: false`
38
38
# or comment out the following line.
39
39
publish_results : true
40
40
45
45
name : SARIF file
46
46
path : results.sarif
47
47
retention-days : 5
48
-
48
+
49
49
# Upload the results to GitHub's code scanning dashboard.
50
50
- name : " Upload to code-scanning"
51
51
uses : github/codeql-action/upload-sarif@5f532563584d71fdef14ee64d17bafb34f751ce5 # v1.0.26
You can’t perform that action at this time.
0 commit comments