Harden SonarCloud workflow: scope permissions, fix injection vectors … · Nordix/porch@fe12fc9

Triggered via push June 23, 2026 11:58

efiacor

main

Status Success

Total duration 59s

Artifacts 1

openssf_scorecard.yaml

on: push

1 warning

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4.2.2, actions/upload-artifact@v4.6.0, github/codeql-action/upload-sarif@v3.28.9. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Produced during runtime

Name	Size	Digest
SARIF file Expired	19.9 KB	`sha256:29aca9b7ec9dc573ffa960efa20978c611126aa46bb76bd56fb182726ae14772`