Skip to content

build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 #123

build(deps): bump actions/setup-node from 4.0.1 to 4.0.2

build(deps): bump actions/setup-node from 4.0.1 to 4.0.2 #123

Workflow file for this run

name: Scorecards
on:
push:
branches: [main]
permissions: read-all
jobs:
scorecards:
name: Scorecards Analysis
runs-on: ubuntu-latest
permissions:
# Needed to upload the results to code-scanning dashboard.
security-events: write
# Used to receive a badge. (Upcoming feature)
id-token: write
actions: read
contents: read
steps:
- name: 'Checkout code'
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
with:
persist-credentials: false
- name: 'Run analysis'
uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736
with:
results_file: results.sarif
results_format: sarif
repo_token: ${{ secrets.SCORECARD_READ_TOKEN }}
publish_results: true
- name: 'Upload to code-scanning'
uses: github/codeql-action/upload-sarif@cdcdbb579706841c47f7063dda365e292e5cad7a
with:
sarif_file: results.sarif