Skip to content

Commit

Permalink
Update scorecard.yml
Browse files Browse the repository at this point in the history
  • Loading branch information
Mionsz committed Dec 16, 2024
1 parent 8c44ee3 commit 0c3e8cd
Showing 1 changed file with 7 additions and 4 deletions.
11 changes: 7 additions & 4 deletions .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,13 +4,18 @@

name: Scorecard supply-chain security
on:
workflow_dispatch:
inputs:
branch:
required: true
default: "main"
# For Branch-Protection check. Only the default branch is supported. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
branch_protection_rule:
# To guarantee Maintained check is occasionally updated. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule:
- cron: '30 10 * * 0'
- cron: '45 0 * * *'
push:
branches: [ "main" ]

Expand All @@ -19,11 +24,9 @@ permissions: read-all
jobs:
analysis:
name: Scorecard analysis
runs-on: ubuntu-latest
runs-on: ubuntu-22.04
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
# Needed to publish results and get a badge (see publish_results below).
id-token: write

steps:
Expand Down

0 comments on commit 0c3e8cd

Please sign in to comment.