Skip to content

Commit 83cb8b8

Browse files
committed
Add required organization security workflows
1 parent 20736b8 commit 83cb8b8

2 files changed

Lines changed: 46 additions & 0 deletions

File tree

.github/workflows/actionlint.yml

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
name: 'Actionlint'
2+
on:
3+
pull_request:
4+
workflow_dispatch:
5+
6+
permissions:
7+
contents: read
8+
pull-requests: write
9+
10+
jobs:
11+
lint:
12+
runs-on: ubuntu-latest
13+
steps:
14+
- uses: actions/checkout@v4
15+
- name: 'Run actionlint with reviewdog'
16+
uses: reviewdog/action-actionlint@v1.7.2
17+
with:
18+
fail_on_error: true
19+
reporter: 'github-pr-check'

.github/workflows/scorecard.yml

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
name: 'Scorecard'
2+
on:
3+
pull_request:
4+
workflow_dispatch:
5+
6+
permissions:
7+
contents: read
8+
security-events: write
9+
id-token: write
10+
11+
jobs:
12+
analyze:
13+
runs-on: ubuntu-latest
14+
steps:
15+
- uses: actions/checkout@v4
16+
with:
17+
persist-credentials: false
18+
- name: 'Run Scorecard'
19+
uses: ossf/scorecard-action@v2.4.3
20+
with:
21+
results_file: 'results.sarif'
22+
results_format: 'sarif'
23+
publish_results: false
24+
- name: 'Upload to GitHub Security Tab'
25+
uses: github/codeql-action/upload-sarif@v4.35.1
26+
with:
27+
sarif_file: 'results.sarif'

0 commit comments

Comments
 (0)