From 6996fce3f88274fc89dd3dc55641e2f9773ec443 Mon Sep 17 00:00:00 2001 From: Hayden B Date: Tue, 19 Mar 2024 13:43:12 -0700 Subject: [PATCH] Run reusable scorecard workflow at main The reusable workflow in community gets regular updates from dependabot. We don't cut releases for community, so if you don't run the reusable workflow off main, you'll be stuck on an outdated version of the underlying scorecard action. Signed-off-by: Hayden B --- .github/workflows/scorecard_action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/scorecard_action.yml b/.github/workflows/scorecard_action.yml index b3f3bdfac..af51859b8 100644 --- a/.github/workflows/scorecard_action.yml +++ b/.github/workflows/scorecard_action.yml @@ -21,7 +21,7 @@ jobs: security-events: write # Needed to publish results and get a badge (see publish_results below). id-token: write - uses: sigstore/community/.github/workflows/reusable-scorecard.yml@d0c95c8803672313d0bf72e1a44021be5b583c24 # main + uses: sigstore/community/.github/workflows/reusable-scorecard.yml@main # (Optional) Disable publish results: # with: # publish_results: false