You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@logging.apache.org by gi...@apache.org on 2025/02/24 12:19:05 UTC

(logging-parent) 01/01: Update `ossf/scorecard-action` to version `2.4.1` (#335)

This is an automated email from the ASF dual-hosted git repository.

github-bot pushed a commit to branch dependabot/github_actions/ossf/scorecard-action-2.4.1
in repository https://gitbox.apache.org/repos/asf/logging-parent.git

commit e8dc1233614386c04a64be06f48de29d833e0172
Author: ASF Logging Services RM <pr...@logging.apache.org>
AuthorDate: Mon Feb 24 12:18:59 2025 +0000

    Update `ossf/scorecard-action` to version `2.4.1` (#335)
---
 .github/workflows/scorecards-analysis-reusable.yaml    | 2 +-
 src/changelog/.12.x.x/update_ossf_scorecard_action.xml | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/scorecards-analysis-reusable.yaml b/.github/workflows/scorecards-analysis-reusable.yaml
index c5777d1..bb71dfe 100644
--- a/.github/workflows/scorecards-analysis-reusable.yaml
+++ b/.github/workflows/scorecards-analysis-reusable.yaml
@@ -35,7 +35,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46    # 2.4.0
+        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186    # 2.4.1
         with:
           results_file: results.sarif
           results_format: sarif
diff --git a/src/changelog/.12.x.x/update_ossf_scorecard_action.xml b/src/changelog/.12.x.x/update_ossf_scorecard_action.xml
new file mode 100644
index 0000000..29278e5
--- /dev/null
+++ b/src/changelog/.12.x.x/update_ossf_scorecard_action.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="335" link="https://github.com/apache/logging-parent/pull/335"/>
+  <description format="asciidoc">Update `ossf/scorecard-action` to version `2.4.1`</description>
+</entry>