update ossf/scorecard-action to fix TUF invalid key bug (#10635)

This commit is contained in:
Shaojun Liu 2024-04-03 09:55:32 +08:00 committed by GitHub
parent 23e33a0ca1
commit dfcf08c58a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -11,8 +11,8 @@ on:
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained # https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule: schedule:
- cron: '26 2 * * *' - cron: '26 2 * * *'
push: # push:
branches: [ "main" ] # branches: [ "main" ]
workflow_dispatch: workflow_dispatch:
# Declare default permissions as read only. # Declare default permissions as read only.
@ -38,7 +38,7 @@ jobs:
persist-credentials: false persist-credentials: false
- name: "Run analysis" - name: "Run analysis"
uses: ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2 uses: ossf/scorecard-action@99c53751e09b9529366343771cc321ec74e9bd3d # tag=v2.0.6
with: with:
results_file: results.sarif results_file: results.sarif
results_format: sarif results_format: sarif