chore: synced local '.github/workflows/ossf-scorecard.yml' with remote 'tools/sre_file_sync/ossf-scorecard.yml'

Author: sre-read-write[bot]

.github/workflows/ossf-scorecard.yml

@@ -9,6 +9,7 @@ on:
       - main
 
 permissions:
+  id-token: write
   contents: read
   issues: read
   pull-requests: read
@@ -21,6 +22,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
+      - name: "Audit DNS requests"
+        uses: cds-snc/dns-proxy-action@f0796e7f3d6bec5d40aecb0321ed8012f5602f84 # v1.0.2
+        env:
+          DNS_PROXY_FORWARDTOSENTINEL: "true"
+          DNS_PROXY_LOGANALYTICSWORKSPACEID: ${{ secrets.LOG_ANALYTICS_WORKSPACE_ID }}
+          DNS_PROXY_LOGANALYTICSSHAREDKEY: ${{ secrets.LOG_ANALYTICS_WORKSPACE_KEY }}
+
       - name: "Checkout code"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
@@ -41,9 +49,11 @@ jobs:
           jq -c '. + {"metadata_owner": "'$OWNER'", "metadata_repo": "'$REPO'", "metadata_query": "ossf"}' ossf-results.json > ossf-results-modified.json
 
       - name: "Post results to Sentinel"
-        uses: cds-snc/sentinel-forward-data-action@01db4a9203054ecdb60ff368c3cdfca71d62e85f
+        uses: cds-snc/sentinel-forward-data-action@2b0831903177e4ba07c850c71ab2645f72cab269
         with:
           file_name: ossf-results-modified.json
-          log_type: GitHubMetadata_OSSF_Scorecard
-          log_analytics_workspace_id: ${{ secrets.LOG_ANALYTICS_WORKSPACE_ID }}
-          log_analytics_workspace_key: ${{ secrets.LOG_ANALYTICS_WORKSPACE_KEY }}
+          dce_endpoint: ${{ secrets.SENTINEL_DCE_ENDPOINT }}
+          dcr_rule_id: ${{ secrets.SENTINEL_DCR_RULE_ID_OSSF }}
+          stream_name: ${{ secrets.SENTINEL_STREAM_NAME_OSSF }}
+          azure_client_id: ${{ secrets.SENTINEL_V2_AZURE_CLIENT_ID }}
+          azure_tenant_id: ${{ secrets.SENTINEL_V2_AZURE_TENANT_ID }}