Skip to content

feat(deps): bump prismjs from 1.29.0 to 1.30.0 in /orgs (#491) #604

feat(deps): bump prismjs from 1.29.0 to 1.30.0 in /orgs (#491)

feat(deps): bump prismjs from 1.29.0 to 1.30.0 in /orgs (#491) #604

Workflow file for this run

name: Scorecards
on:
branch_protection_rule:
schedule:
- cron: '0 12 * * 4'
push:
branches: [main]
permissions: read-all
jobs:
scorecards:
name: Scorecards Analysis
runs-on: ubuntu-latest
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
# Used to receive a badge. (Upcoming feature)
id-token: write
actions: read
contents: read
steps:
- name: 'Checkout code'
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
with:
persist-credentials: false
- name: 'Run analysis'
uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186
with:
results_file: results.sarif
results_format: sarif
repo_token: ${{ secrets.SCORECARD_READ_TOKEN }}
publish_results: true
- name: 'Upload to code-scanning'
uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5
with:
sarif_file: results.sarif