diff --git a/src/main.ts b/src/main.ts index 0f64554..a23fc00 100644 --- a/src/main.ts +++ b/src/main.ts @@ -186,8 +186,11 @@ async function run(): Promise { ) // generate informational scorecard entries for all added changes in the PR - const scorecardChanges = getScorecardChanges(changes) - const scorecard = await getScorecardLevels(scorecardChanges) + let scorecard: Scorecard = {dependencies: []} + if (config.show_openssf_scorecard) { + const scorecardChanges = getScorecardChanges(changes) + scorecard = await getScorecardLevels(scorecardChanges) + } const minSummary = summary.addSummaryToSummary( vulnerableChanges,