From 41e00af395c8dace730165ef22d546e504b5c305 Mon Sep 17 00:00:00 2001 From: Josh Soref <2119212+jsoref@users.noreply.github.com> Date: Tue, 4 Feb 2025 15:54:05 -0500 Subject: [PATCH] Limit scorecard to default branch Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com> --- code-scanning/scorecard.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/code-scanning/scorecard.yml b/code-scanning/scorecard.yml index 9381468..248c9f9 100644 --- a/code-scanning/scorecard.yml +++ b/code-scanning/scorecard.yml @@ -21,6 +21,8 @@ jobs: analysis: name: Scorecard analysis runs-on: ubuntu-latest + # This action only works when run from the default branch + if: github.event.repository.default_branch == github.ref_name permissions: # Needed to upload the results to code-scanning dashboard. security-events: write