Mercurial > p > roundup > code
comparison .github/workflows/ossf-scorecard.yml @ 7514:ffa1b73444d5
Bump ossf/scorecard-action from 2.1.3 to 2.2.0 - https://github.com/roundup-tracker/roundup/pull/41
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Mon, 26 Jun 2023 00:18:04 -0400 |
| parents | 0b4028a75705 |
| children | 4689795494dc |
comparison
equal
deleted
inserted
replaced
| 7513:fa4a5926339a | 7514:ffa1b73444d5 |
|---|---|
| 38 uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.1.0 | 38 uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.1.0 |
| 39 with: | 39 with: |
| 40 persist-credentials: false | 40 persist-credentials: false |
| 41 | 41 |
| 42 - name: "Run analysis" | 42 - name: "Run analysis" |
| 43 uses: ossf/scorecard-action@80e868c13c90f172d68d1f4501dee99e2479f7af # v2.1.3 | 43 uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031 # v2.2.0 |
| 44 with: | 44 with: |
| 45 results_file: results.sarif | 45 results_file: results.sarif |
| 46 results_format: sarif | 46 results_format: sarif |
| 47 # (Optional) "write" PAT token. Uncomment the `repo_token` line below if: | 47 # (Optional) "write" PAT token. Uncomment the `repo_token` line below if: |
| 48 # - you want to enable the Branch-Protection check on a *public* repository, or | 48 # - you want to enable the Branch-Protection check on a *public* repository, or |