diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml index 1923fdaf0..f387341e4 100644 --- a/.github/workflows/ossf-scorecard.yml +++ b/.github/workflows/ossf-scorecard.yml @@ -11,7 +11,7 @@ permissions: jobs: scorecard: - uses: platform-mesh/.github/.github/workflows/job-ossf-scorecard.yml@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 # main + uses: platform-mesh/.github/.github/workflows/job-ossf-scorecard.yml@03e076ff9aebe43ead6b9d77f3bb764a9d411347 # main permissions: security-events: write # Needed to upload Scorecard results to the GitHub Security tab id-token: write # Needed for keyless publishing of Scorecard results