You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by vi...@apache.org on 2026/10/20 16:23:47 UTC
(superset-kubernetes-operator) branch main updated: chore(deps): update ossf/scorecard-action action to v2.5.0 (#463)
This is an automated email from the ASF dual-hosted git repository.
villebro pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/superset-kubernetes-operator.git
The following commit(s) were added to refs/heads/main by this push:
new bf53ad8 chore(deps): update ossf/scorecard-action action to v2.5.0 (#463)
bf53ad8 is described below
commit bf53ad8f841da298d378691467131971b7b4d8a1
Author: Mend Renovate <bo...@renovateapp.com>
AuthorDate: Tue Oct 20 17:23:41 2026 +0100
chore(deps): update ossf/scorecard-action action to v2.5.0 (#463)
* chore(deps): update ossf/scorecard-action action to v2.5.0
* chore(ci): align Scorecard workflow patterns
---------
Co-authored-by: Ville Brofeldt <vi...@gmail.com>
---
.github/workflows/scorecard.yml | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 2e052e2..8d03035 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -16,7 +16,6 @@
name: Scorecard
on:
- branch_protection_rule:
schedule:
- cron: "27 5 * * 2" # Tuesday 05:27 UTC
push:
@@ -37,12 +36,19 @@ jobs:
persist-credentials: false
- name: Run analysis
- uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
+ uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
with:
results_file: results.sarif
results_format: sarif
publish_results: true
+ - name: Upload results artifact
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
+ with:
+ name: scorecard-results
+ path: results.sarif
+ retention-days: 5
+
- name: Upload to code scanning
uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
with: