We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b3a3b2c commit 76595fcCopy full SHA for 76595fc
1 file changed
.github/workflows/ossf-scorecard.yml
@@ -23,18 +23,8 @@ jobs:
23
with:
24
persist-credentials: false
25
26
- - uses: actions/create-github-app-token@df432ceedc7162793a195dd1713ff69aefc7379e # v2.0.6
27
- id: create-token
28
- with:
29
- # analyzing classic branch protections requires a token with admin read permissions
30
- # see https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
31
- # and https://github.com/open-telemetry/community/issues/2769
32
- app-id: ${{ vars.OSSF_SCORECARD_APP_ID }}
33
- private-key: ${{ secrets.OSSF_SCORECARD_PRIVATE_KEY }}
34
-
35
- uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
36
37
- repo_token: ${{ steps.create-token.outputs.token }}
38
results_file: results.sarif
39
results_format: sarif
40
publish_results: true
0 commit comments