actions/starter-workflows
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updates

Browse Source
This commit is contained in:
laurentsimon
2022-01-04 18:26:32 +00:00
parent 48edda6aca
commit 07be376c3a
1 changed files with 6 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
code-scanning/scorecards.yml
+6 -9
View File
@@ -29,16 +29,13 @@ jobs:
with: with:
results_file: results.sarif results_file: results.sarif
results_format: sarif results_format: sarif
# Read-only PAT token. To create it, follow the steps # Read-only PAT token. To create it,
# in https://github.com/ossf/scorecard-action/main#pat-token-creation # follow the steps in https://github.com/ossf/scorecard-action/blob/main#pat-token-creation.
repo_token: ${{ secrets.SCORECARD_TOKEN }} repo_token: ${{ secrets.SCORECARD_TOKEN }}
# The Scorecard team runs a weekly scan of public GitHub repositories in order to track # Publish the results to enable scorecard badges. For more details, see
# the overall security health of the open source ecosystem. The results are publicly # https://github.com/ossf/scorecard-action/blob/main#publishing-results.
# available as described at https://github.com/ossf/scorecard#public-data. # If you are installing the action on a private repo, set it to `publish_results: false`
# Setting `publish_results: true` replaces the results of the team's weelky scans, # or do not set the value at all.
# helping us scale by cutting down on repeated workflows and GitHub API requests.
# This option is needed to enable badges on the repo. If you're installing the action
# on a private repo, set it to `publish_results: false` or do not set the value at all.
publish_results: true publish_results: true
# Upload the results as artifacts (optional). # Upload the results as artifacts (optional).