Skip to content

Commit e7b58ac

Browse files
authored
Fix/ossf scorecard workflow (#153)
* Update SARIF upload action version in workflow * Update scorecard-action version to v2.4.3 in workflow
1 parent 5d944e6 commit e7b58ac

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

.github/workflows/ossf-scoreboard.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
persist-credentials: false
3737

3838
- name: "Run analysis"
39-
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
39+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
4040
with:
4141
results_file: results.sarif
4242
results_format: sarif
@@ -49,7 +49,9 @@ jobs:
4949
path: results.sarif
5050
retention-days: 5
5151

52+
# Upload the results to GitHub's code scanning dashboard (optional).
53+
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
5254
- name: "Upload to code-scanning"
53-
uses: github/codeql-action/upload-sarif@32f7c15247fa6542dc765bd40f6a15dc2caeed89 # v4.31.2
55+
uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
5456
with:
5557
sarif_file: results.sarif

0 commit comments

Comments
 (0)