ci: Run scorecard only on push to main

Scorecard should be used as a reactive tool and is not supported for running in PRs. See ossf/scorecard-action#1019
sscheib · Jun 18, 2024 · c5ed67e · c5ed67e
1 parent 6d51e34
commit c5ed67e
Showing 1 changed file with 0 additions and 3 deletions.
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -11,9 +11,6 @@ on:  # yamllint disable-line rule:truthy
   push:
     branches:
       - 'main'
-  pull_request:
-    branches:
-      - 'main'
   workflow_dispatch: {}
 
 # Declare default permissions as read only.