Skip to content
OSSF Scorecard

fix(ci): use npm install instead of npm ci, remove stale lockfile #16

Sign in to view logs

fix(ci): use npm install instead of npm ci, remove stale lockfile

fix(ci): use npm install instead of npm ci, remove stale lockfile #16

Workflow file for this run

.github/workflows/scorecard.yml at 50efe1e
name: OSSF Scorecard
on:
schedule:
- cron: "0 6 * * 1"
push:
branches: [main, master]
workflow_dispatch:
permissions: read-all
jobs:
analysis:
name: Scorecard Analysis
runs-on: ubuntu-latest
permissions:
security-events: write
id-token: write
steps:
- name: Checkout
uses: actions/checkout@v6
with:
persist-credentials: false
- name: Run Scorecard
uses: ossf/scorecard-action@v2.4.3
with:
results_file: results.sarif
results_format: sarif
publish_results: true
- name: Upload SARIF
uses: github/codeql-action/upload-sarif@v4
with:
sarif_file: results.sarif