allow ghcr docker image (#707)

With the switch to GHCR we'll need to support both images for e2e testing. Eventually we can remove the gcr.io case if needed. ossf/scorecard-action#1453 Signed-off-by: Spencer Schrock <[email protected]>
ossf · Nov 13, 2024 · 7415c7a · 7415c7a
1 parent bb88eb9
commit 7415c7a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/server/verify_workflow.go b/app/server/verify_workflow.go
@@ -182,7 +182,7 @@ func verifyScorecardWorkflow(workflowContent string, verifier commitVerifier) er
 				}
 			}
 		// Needed for e2e tests
-		case "gcr.io/openssf/scorecard-action":
+		case "gcr.io/openssf/scorecard-action", "ghcr.io/ossf/scorecard-action":
 		default:
 			return verificationError{e: fmt.Errorf("%w: %s", errUnallowedStepName, stepName)}
 		}