1
+ ---
1
2
# This workflow uses actions that are not certified by GitHub. They are provided
2
3
# by a third-party and are governed by separate terms of service, privacy
3
4
# policy, and support documentation.
10
11
# To guarantee Maintained check is occasionally updated. See
11
12
# https://github.com/ossf/scorecard/blob/main/docs/checks.md#maintained
12
13
schedule :
13
- - cron : ' 40 8 * * 5'
14
+ - cron : 40 8 * * 5
14
15
push :
15
- branches : [ " main" ]
16
+ branches : [main]
16
17
17
18
# Declare default permissions as read only.
18
19
permissions : read-all
@@ -31,12 +32,12 @@ jobs:
31
32
# actions: read
32
33
33
34
steps :
34
- - name : " Checkout code"
35
+ - name : Checkout code
35
36
uses : actions/checkout@93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 # v3.1.0
36
37
with :
37
38
persist-credentials : false
38
39
39
- - name : " Run analysis"
40
+ - name : Run analysis
40
41
uses : ossf/scorecard-action@e38b1902ae4f44df626f11ba0734b14fb91f8f86 # v2.1.2
41
42
with :
42
43
results_file : results.sarif
@@ -58,15 +59,15 @@ jobs:
58
59
59
60
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
60
61
# format to the repository Actions tab.
61
- - name : " Upload artifact"
62
+ - name : Upload artifact
62
63
uses : actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.1.0
63
64
with :
64
65
name : SARIF file
65
66
path : results.sarif
66
67
retention-days : 5
67
68
68
69
# Upload the results to GitHub's code scanning dashboard.
69
- - name : " Upload to code-scanning"
70
+ - name : Upload to code-scanning
70
71
uses : github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4
71
72
with :
72
73
sarif_file : results.sarif
0 commit comments