You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@logging.apache.org by gi...@apache.org on 2023/10/18 07:39:00 UTC
[logging-parent] branch main updated: Update `ossf/scorecard-action` to version `2.3.0` (#1553916310)
This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/logging-parent.git
The following commit(s) were added to refs/heads/main by this push:
new f7fbeee Update `ossf/scorecard-action` to version `2.3.0` (#1553916310)
f7fbeee is described below
commit f7fbeee3ceacfe62488fad5943d07cad06ec800d
Author: ASF Logging Services RM <pr...@logging.apache.org>
AuthorDate: Wed Oct 18 07:38:55 2023 +0000
Update `ossf/scorecard-action` to version `2.3.0` (#1553916310)
---
.github/workflows/scorecards-analysis-reusable.yaml | 2 +-
src/changelog/.10.x.x/update_ossf_scorecard_action.xml | 9 +++++++++
src/site/_release-notes/_10.x.x.adoc | 1 +
3 files changed, 11 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/scorecards-analysis-reusable.yaml b/.github/workflows/scorecards-analysis-reusable.yaml
index 86c6ade..3ebf73a 100644
--- a/.github/workflows/scorecards-analysis-reusable.yaml
+++ b/.github/workflows/scorecards-analysis-reusable.yaml
@@ -35,7 +35,7 @@ jobs:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031 # 2.2.0
+ uses: ossf/scorecard-action@483ef80eb98fb506c348f7d62e28055e49fe2398 # 2.3.0
with:
results_file: results.sarif
results_format: sarif
diff --git a/src/changelog/.10.x.x/update_ossf_scorecard_action.xml b/src/changelog/.10.x.x/update_ossf_scorecard_action.xml
new file mode 100644
index 0000000..bafec3c
--- /dev/null
+++ b/src/changelog/.10.x.x/update_ossf_scorecard_action.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xmlns="http://logging.apache.org/log4j/changelog"
+ xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.1.xsd"
+ type="changed">
+ <issue id="1553916310" link="https://github.com/apache/logging-parent/pull/45"/>
+ <author id="github:dependabot"/>
+ <description format="asciidoc">Update `ossf/scorecard-action` to version `2.3.0`</description>
+</entry>
diff --git a/src/site/_release-notes/_10.x.x.adoc b/src/site/_release-notes/_10.x.x.adoc
index d8d9fbf..f6fc010 100644
--- a/src/site/_release-notes/_10.x.x.adoc
+++ b/src/site/_release-notes/_10.x.x.adoc
@@ -44,6 +44,7 @@ This minor release contains several small improvements.
==== Changed
* Update `github/codeql-action` to version `2.22.3` (https://github.com/apache/logging-parent/pull/47[1558328036])
+* Update `ossf/scorecard-action` to version `2.3.0` (https://github.com/apache/logging-parent/pull/45[1553916310])
==== Fixed