From c5ed67e2da55165fa9020fc83d705da513222345 Mon Sep 17 00:00:00 2001
From: Steffen Scheib <steffen@scheib.me>
Date: Tue, 18 Jun 2024 22:46:54 +0200
Subject: [PATCH] ci: Run scorecard only on push to main

Scorecard should be used as a reactive tool and is not supported
for running in PRs.
See https://github.com/ossf/scorecard-action/issues/1019
---
 .github/workflows/scorecard.yml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 7c980e6d..abed3d6c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -11,9 +11,6 @@ on:  # yamllint disable-line rule:truthy
   push:
     branches:
       - 'main'
-  pull_request:
-    branches:
-      - 'main'
   workflow_dispatch: {}
 
 # Declare default permissions as read only.