ci: Render chart commits under Updates in release notes (#826) #355
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: OpenSSF Scorecard | |
| on: | |
| branch_protection_rule: | |
| schedule: | |
| - cron: '30 2 * * 1' | |
| push: | |
| branches: | |
| - main | |
| permissions: read-all | |
| jobs: | |
| analysis: | |
| name: Scorecard Analysis | |
| # Scheduled runs are reserved for the canonical repository; forks retain push checks. | |
| if: github.event_name != 'schedule' || github.repository == 'container-registry/harbor-next' | |
| # Scorecard result publishing requires a single GitHub-hosted Ubuntu runner. | |
| runs-on: ubuntu-latest | |
| permissions: | |
| security-events: write | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| with: | |
| persist-credentials: false | |
| - name: Run Scorecard | |
| uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 | |
| with: | |
| results_file: results.sarif | |
| results_format: sarif | |
| publish_results: true | |
| - name: Upload results to GitHub Security tab | |
| uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 | |
| with: | |
| sarif_file: results.sarif |