oapi-codegen/.github/workflows/scorecard.yml at main · oapi-codegen/oapi-codegen · GitHub

View runs

History

46 lines (40 loc) · 1.3 KB

Raw

on:

schedule:

- cron: "0 5 * * 1"

push:

branches:

- main

permissions: read-all

jobs:

analysis:

runs-on: ubuntu-latest

permissions:

# Needed to upload the results to code-scanning dashboard

security-events: write

# Needed to publish results and get a badge (see publish_results below)

id-token: write

steps:

- name: "Checkout code"

uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

persist-credentials: false

show-progress: false

- name: "Run analysis"

uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4

with:

results_file: results.sarif

results_format: sarif

publish_results: true

- name: "Upload artifact"

uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1

with:

path: results.sarif

retention-days: 5

# Upload the results to GitHub's code scanning dashboard

- name: "Upload to code-scanning"

uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9

with:

sarif_file: results.sarif

oapi-codegen/.github/workflows/scorecard.yml at main · oapi-codegen/oapi-codegen · GitHub

Uh oh!

Uh oh!

oapi-codegen/.github/workflows/scorecard.yml at main · oapi-codegen/oapi-codegen · GitHub

Uh oh!

Uh oh!

Expand file tree

Breadcrumbs

scorecard.yml

Latest commit

History

Breadcrumbs

scorecard.yml

File metadata and controls