3 Commits

Author	SHA1	Message	Date
Spencer Schrock	4620c76b38	update Scorecard Action hashes and version comments (#2348) ... * update action hashes and version comments ossf/scorecard-action v2.1.2 is old and doesnt work after a Sigstore change. https://blog.sigstore.dev/tuf-root-update/ Signed-off-by: Spencer Schrock <sschrock@google.com> * downgrade actions/upload-artifact to node20 version of v3 dependabot will suggest upgrade to v4.3.1 for repos that can upgrade. note: v3.pre.node20 is how dependabot refers to the pinned hash, so use that so it can upgrade the comment Signed-off-by: Spencer Schrock <sschrock@google.com> * upgrade github/codeql-action/upload-sarif to v3.24.9 Signed-off-by: Spencer Schrock <sschrock@google.com> --------- Signed-off-by: Spencer Schrock <sschrock@google.com> Co-authored-by: Alexis Abril <alexisabril@github.com>	2024-03-27 13:25:03 -07:00
Chris Carini	10f6091ee8	Update scorecard.yml with latest releases (#1944) ... Update scorecard.yml with latest releases for ossf/scorecard-action & github/codeql-action/upload-sarif	2023-02-16 11:39:52 +05:30
Gabriela Gutierrez	9f245d9aba	Update 'Scorecards' occurrences to 'Scorecard' (#1889) ... * Update Scorecard naming occurences Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * Update Scorecard icon naming Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> * Update Scorecard workflow naming Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> Signed-off-by: Gabriela Gutierrez <gabigutierrez@google.com> Co-authored-by: Sampark Sharma <phantsure@github.com>	2023-01-03 13:49:28 +05:30