Skip to content

Merge pull request #81 from modeseven-lfreleng-actions/chore/remove-l… #66

Merge pull request #81 from modeseven-lfreleng-actions/chore/remove-l…

Merge pull request #81 from modeseven-lfreleng-actions/chore/remove-l… #66

---
# SPDX-License-Identifier: Apache-2.0
# SPDX-FileCopyrightText: 2025 The Linux Foundation
# This workflow uses actions that are not certified by GitHub. They are provided
# by a third-party and are governed by separate terms of service, privacy
# policy, and support documentation.
name: "OpenSSF Scorecard"
# yamllint disable-line rule:truthy
on:
workflow_dispatch:
# For Branch-Protection check. Only the default branch is supported. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#branch-protection
branch_protection_rule:
# To guarantee Maintained check is occasionally updated. See
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
schedule:
- cron: "50 4 * * 0"
push:
branches: ["main", "master"]
# Declare default permissions as none.
permissions: {}
jobs:
openssf-scorecard:
name: "OpenSSF Scorecard"
# yamllint disable-line rule:line-length
uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@f7aae218f1fa0257e3dcd19f5c7d3f88f482f266 # v0.10.1
permissions:
# Needed to read repository contents (checkout, etc.).
contents: read
security-events: write # Needed to upload results to code-scanning dashboard.
id-token: write # Needed to publish results and obtain a Scorecard badge via OIDC.
# Uncomment the permission below if installing in a private repository.
# actions: read