From 3ac6112e557fdcbcf1fb024d25476579b35df8f1 Mon Sep 17 00:00:00 2001 From: Nigel Jones Date: Tue, 13 Aug 2024 16:25:55 +0100 Subject: [PATCH] #1830 update scorecard to v5 (gh action 2.4.0) Signed-off-by: Nigel Jones --- .github/workflows/scorecard.yml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index ff54bf3f2..bb7ddee30 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -14,6 +14,7 @@ on: branches: [ "main" ] pull_request: + jobs: analysis: name: Scorecard analysis @@ -29,12 +30,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # pin@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # pin@v4 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # pin@v2.3.1 + uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # pin@v2.4.0 with: results_file: results.sarif results_format: sarif @@ -56,7 +57,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba # pin@v4 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin@v4 with: name: SARIF file path: results.sarif