comments

code-scanning/properties/scorecards.properties.json

@@ -3,8 +3,5 @@
     "creator": "Open Source Security Foundation (OpenSSF) - https://github.com/ossf",
     "description": "Scorecards is a static analysis tool to assess the security posture of your project",
     "iconName": "scorecards",
-    "categories": [
-        "code-quality", "testing",
-        "supply-chain", "security", "scanning"
-    ]
+    "categories": ["Code Scanning"]
 }

code-scanning/scorecards.yml

@@ -3,8 +3,7 @@ on:
   # Only the default branch is supported.
   branch_protection_rule:
   schedule:
-    # Weekly on Saturdays.
-    - cron: '30 1 * * 6'
+    - cron: $cron-weekly
   push:
     branches: [ $default-branch ]