diff --git a/.github/workflows/proof-pr.yml b/.github/workflows/proof-pr.yml index 14aa109..3250b6e 100644 --- a/.github/workflows/proof-pr.yml +++ b/.github/workflows/proof-pr.yml @@ -9,10 +9,10 @@ permissions: jobs: proof: - uses: saagpatel/proof-pr/.github/workflows/proof-pr-receipt.yml@v0.2.3 + uses: saagpatel/proof-pr/.github/workflows/proof-pr-receipt.yml@v0.2.4 with: receipt_path: proof-pr.json - proof_pr_ref: v0.2.3 + proof_pr_ref: v0.2.4 check_public_git_metadata: true public_git_metadata_mode: introduced artifact_name: github-repo-auditor-proof-pr diff --git a/proof-pr.json b/proof-pr.json index 1fe47b2..5d8d7f2 100644 --- a/proof-pr.json +++ b/proof-pr.json @@ -116,6 +116,23 @@ "status": "not_applicable", "required": false, "summary": "No UI, workbook, dashboard, or visual artifact changed." + }, + { + "id": "public-git-metadata", + "kind": "security", + "command": [ + "proof-pr", + "check-public-git-metadata", + "--ref", + "HEAD", + "--base-ref", + "origin/main", + "--summary-format", + "text" + ], + "status": "passed", + "required": true, + "summary": "Public git metadata checked in introduced mode for origin/main..HEAD; legacy history and tags were not in scope; findings=0." } ], "security": {